Plugin icon

Oliver POS – WooCommerce POS for iPhone, iPad & Android

oliver-pos

Vulnerabilities:

4

Last Updated:

August 14, 2026

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2026-05-19
Title
Oliver POS < 4.5.4 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header
Fixed in
Fixed in 4.5.4
CVSS
6.5 (medium)
Published
2025-02-14
Title
Oliver POS – A WooCommerce Point of Sale (POS) < 2.4.2.4 - Sensitive Information Exposure to Privilege Escalation
Fixed in
Fixed in 2.4.2.4
CVSS
9.8 (critical)
Published
2024-02-27
Title
Oliver POS – A WooCommerce Point of Sale (POS) < 2.4.1.9 - Cross-Site Request Forgery
Fixed in
Fixed in 2.4.1.9
CVSS
6.3 (medium)
Published
2024-02-19
Title
Oliver POS < 2.4.2.1 - Subscriber+ Unauthorized AJAX Calls
Fixed in
Fixed in 2.4.2.1
CVSS
6.5 (medium)