Vitepos-CVE-Report

Vitepos-CVE-Report CVE-2025-13156 の開示 CVE-2025-13156 - Vitepos – Point of Sale POS for WooCommerce の脆弱性 このリポジトリは、appsbd によって開発された WordPress プラグイン Vitepos – Point of Sale POS for WooCommerce = 3.3.0 で発見された脆弱性を開示するものです。 🛠 影響を受けるバージョン 製品 : Vitepos – Point of Sale POS for WooCommerce バージョン : ≤ v3.3.0...

EUVD-2026-43459

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through = 3.4.2...

CVE-2026-57385

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through = 3.4.2...

PT-2026-57697

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through = 3.4.2...

EUVD-2024-52368

Malicious code in bioql PyPI...

CVE-2024-33574

Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1...

CVE-2024-54242

Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through = 1.3...

CVE-2024-54241

Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification:...

CVE-2024-54242

CVE-2024-54242 describes a Missing Authorization (Broken Access Control) vulnerability in WordPress Simple Notification plugin versions up to 1.3. The issue arises from incorrectly configured access control, enabling unauthorized actions as described in multiple sources. The CVE affects Simple No...

CVE-2024-54241

CVE-2024-54241 concerns a Missing Authorization vulnerability in the WordPress plugin Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification. Affected versions are listed as 1.5 through n/a; description specifies an incorrectly configured access control. Exploitation stat...

CVE-2024-54242: Missing Authorization

Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through = 1.3...

CVE-2024-54241: Missing Authorization

Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification:...

CVE-2024-33574 WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1...

CVE-2024-33574

CVE-2024-33574 is a Missing Authorization vulnerability in the WordPress plugin Vitepos (appsbd Vitepos). Affected: Vitepos Lite up to 3.0.1. Root cause: missing authorization allowing unauthorized access. Impact details are limited in the provided sources (no explicit exploit data or affected sc...

Best Support System 3.0.4 Cross Site Scripting

Exploit Title: Best Support System 3.0.4 - 'ticketbody' Persistent XSS Authenticated Google Dork: "Powered By Best Support System" Date: 2020-08-23 Exploit Author: Ex.Mi https://ex-mi.ru Vendor: Appsbd https://appsbd.com Software Version: 3.0.4 Software Link:...