Appsbd - vulnerabilities (CVEs)
17 CVEs in 9 products, 4 in the last 30 days, newest from 2026-10-16.
Products
- Vitepos - 8 CVEs
- Vitepos Point Of Sale Pos For Woocommerce - 3 CVEs
- Simple Notification - 2 CVEs
- Best Support System - 1 CVEs
- Elite Notification Sales Popup - 1 CVEs
- Fomo Woocommerce Notification - 1 CVEs
- Mini Cart Drawer For Woocommerce - 1 CVEs
- Social Proof - 1 CVEs
- Vite Coupon - 1 CVEs
Newest CVEs of Appsbd
- CVE-2026-92766 - CVSS 7.5 (high), 2026-10-16: The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up…
- CVE-2026-109414 - CVSS 6.5 (medium), 2026-10-16: The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end…
- CVE-2026-105076 - CVSS 7.6 (high), 2026-10-08: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL…
- CVE-2026-96815 - CVSS 7.2 (high), 2026-09-30: Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
- CVE-2026-57385 - CVSS 8.5 (high), 2026-07-13: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL…
- CVE-2026-54841 - CVSS 7.5 (high), 2026-06-25: Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.
- CVE-2025-13156 - CVSS 8.8 (high), 2025-11-21: The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
- CVE-2025-39535 - CVSS 7.2 (high), 2025-04-17: Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos:…
- CVE-2025-32642 - CVSS 10 (critical), 2025-04-09: Cross-Site Request Forgery (CSRF) vulnerability in appsbd Vite Coupon vite-coupon allows Remote Code Inclusion.This issue affects Vite Coupon: from n/a…
- CVE-2025-22277 - CVSS 8.8 (high), 2025-04-01: Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos:…
- CVE-2024-13866 - CVSS 6.4 (medium), 2025-03-05: The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input…
- CVE-2025-26750 - CVSS 6.5 (medium), 2025-02-22: Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
- CVE-2024-54241 - CVSS 6.5 (medium), 2024-12-13: Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly…
- CVE-2024-54242 - CVSS 6.5 (medium), 2024-12-13: Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security…
- CVE-2023-47694 - CVSS 5.4 (medium), 2024-12-09: Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This…
- CVE-2024-33574 - CVSS 4.3 (medium), 2024-05-08: Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1.
- CVE-2020-24963 - CVSS 5.4 (medium), 2020-09-04: An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
