Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Vitepos – Point of sale (POS) plugin for WooCommerce 3.1.3

  • Severity: medium-risk
  • Status: Open
  • Publication: February 14, 2025

The Vitepos plugin used for Point of Sale (POS) in WooCommerce on WordPress is at risk of being accessed without permission. This is because it does not check for the appropriate abilities in a function, which is the case for all versions up to 3.1.3. This means that attackers who are logged in and have access at the Subscriber level or higher can carry out unauthorized actions.

Detected in:

Vitepos – Point of sale (POS) for WooCommerce fixed vulnerable versions:
Vitepos – Point of sale (POS) plugin for WooCommerce open vulnerable versions: >= * <= 3.1.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.