kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce

• CVE-2026-17581 High 7.2 WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine 1.4%
• CVE-2026-16078 Medium 6.5 WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter 0.9%
• CVE-2024-2384 Medium 4.3 WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure 0.3%