CVE-2026-17581

creationtimestamp| type| source ---|---|--- 2026-08-16 12:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt764foyul2k 2026-08-16 12:16:10+00:00| seen| https://bsky.app/profile/potato.software/post/3mt764grgpt2l 2026-08-16 22:16:07+00:00| seen|...

CVE-2026-17581

The CVE concerns the WCPOS – Point of Sale (POS) plugin for WooCommerce (WordPress). Affected versions: up to 1.9.14. Root cause: the Receipt_Renderer_Factory dispatches templates using the thermal engine to the Legacy_Php_Renderer instead of a safe thermal-specific renderer, enabling Code Inject...