Lucene search
+L

108 matches found

Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•15 views

PT-2025-17176 · Vitepos · Vitepos

Name of the Vulnerable Software and Affected Versions: Vitepos versions 3.1.7 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing Authentication Abuse. Recommendations: For versions 3.1.7 and earlier, update to a version later tha...

7.2CVSS7.4AI score0.00485EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/03 9:38 a.m.•15 views

CVE-2025-22277

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.4...

8.8CVSS7.2AI score0.0049EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 6:15 a.m.•23 views

CVE-2025-22277

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.4...

8.8CVSS0.0049EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 5:32 a.m.•31 views

CVE-2025-22277 WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.4...

8.8CVSS0.0049EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 5:32 a.m.•55 views

CVE-2025-22277

CVE-2025-22277 affects the Vitepos POS plugin for WooCommerce (appsbd). The connected data confirms a Missing Authorization flaw that enables authentication bypass/abuse via an alternate path or channel, affecting Vitepos versions up to 3.1.4. The record notes a patch has been applied (Patch Stat...

8.8CVSS7.2AI score0.0049EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 5:32 a.m.•10 views

CVE-2025-22277 WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.4...

8.8CVSS8.6AI score0.0049EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•18 views

WordPress plugin Vitepos 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS8.9AI score0.0049EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•7 views

PT-2025-14029

Name of the Vulnerable Software and Affected Versions Vitepos versions through 3.1.4 Description The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing Authentication Abuse. Recommendations For versions through 3.1.4, update to a version later than 3.1.4 to...

8.8CVSS0.0049EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•5 views

CVE-2025-22277: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.4...

8.8CVSS5.8AI score0.0049EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/31 2:17 p.m.•15 views

WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Vitepos versions = 3.1.4...

8.8CVSS8.4AI score0.0049EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/24 4:21 p.m.•14 views

CVE-2025-26750

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

6.5CVSS7.2AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/22 4:15 p.m.•16 views

CVE-2025-26750

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

6.5CVSS0.00343EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/22 3:52 p.m.•9 views

CVE-2025-26750 WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

6.5CVSS8.5AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/22 3:52 p.m.•71 views

CVE-2025-26750

CVE-2025-26750 describes a Missing Authorization vulnerability in the WordPress Vitepos POS plugin (Vitepos-lite) for WooCommerce, affecting versions up to 3.1.3. The CVSS v3.1 base score is 6.5 (Network, Low Privileges, High Confidentiality impact; UI: none; I: none). No exploitation details are...

6.5CVSS7.2AI score0.00343EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/22 3:52 p.m.•29 views

CVE-2025-26750 WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

6.5CVSS0.00343EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/22 12:00 a.m.•8 views

CVE-2025-26750: Missing Authorization

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

6.5CVSS5.9AI score0.00343EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/22 12:00 a.m.•17 views

PT-2025-7607 · Vitepos · Vitepos

Name of the Vulnerable Software and Affected Versions: Vitepos versions prior to 3.1.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions prior to 3.1.3,...

6.5CVSS9.4AI score0.00343EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/02/22 12:00 a.m.•19 views

WordPress plugin Vitepos 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS8.3AI score0.00343EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/02/14 3:13 p.m.•24 views

WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Vitepos versions = 3.1.3...

6.5CVSS7AI score0.00343EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/05/08 2:15 p.m.•26 views

CVE-2024-33574

Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1...

4.3CVSS4.7AI score0.00373EPSS
SaveExploits0References1
Rows per page
Query Builder