Log in Start free

kilbot

Products

ProductCVEsExploitedLatest
WCPOS – Point of Sale (POS) plugin for WooCommerce3–Aug 16, 2026
WooCommerce POS2–Jun 16, 2026

Exploited and recent CVEs

  • CVE-2026-17581 High 7.2 WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine 1.4%
  • CVE-2026-16078 Medium 6.5 WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter 0.9%
  • CVE-2026-52711 High 7.5 WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability 0.2%
  • CVE-2025-48117 Medium 5.3 WordPress WooCommerce POS plugin <= 1.7.8 - Broken Access Control Vulnerability 0.3%
  • CVE-2024-2384 Medium 4.3 WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure 0.3%