Oliver Pos Security Vulnerabilities and Issues — Oliver Pos CVE List

Lucene search

OliverposOliver Pos

3 matches found

CVE•added 2024/02/28 9:15 a.m.•143 views

CVE-2024-1954

The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1.8. This is due to missing or incorrect nonce validation in the includes/class-pos-bridge-install.php file. This makes it possible for unaut...

6.3CVSS6.2AI score0.00095EPSS

CVE•added 2025/02/15 8:15 a.m.•68 views

CVE-2024-13513

The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.2.3 via the logging functionality. This makes it possible for unauthenticated attackers to extract sensitive data including the plugin's ...

9.8CVSS6.6AI score0.00103EPSS

CVE•added 2024/02/29 1:43 a.m.•42 views

CVE-2024-0702

The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions hooked via AJAX in the includes/class-pos-bridge-install.php file in all versions up to, and including, 2.4.1.8. This makes it possible ...

7.3CVSS7AI score0.00104EPSS