WordPress TillKit plugin < 1.0.5 - Unauthenticated POS Takeover vulnerability

Unauthenticated POS Takeover vulnerability discovered by Pedro Pinho in WordPress Plugin TillKit versions 1.0.5...

Shopify: Staff Member can Get POS Access Without User Interaction

Hi, I found that it is possible for a staff member to grant themselves POS access without user interaction from admin. Steps to reproduce - Login as a staff member with Manage Locations permission only, in a shop that has POS channel up and running Could be Lite - Make sure your staff member...