Plugin icon

WCPOS – Point of Sale (POS) plugin for WooCommerce

woocommerce-pos

Vulnerabilities:

5

Last Updated:

August 25, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-08-15
Title
WCPOS < 1.9.15 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine
Fixed in
Fixed in 1.9.15
CVSS
7.2 (high)
Published
2026-07-22
Title
WCPOS < 1.9.9 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter
Fixed in
Fixed in 1.9.9
CVSS
6.5 (medium)
Published
2026-06-15
Title
WCPOS – Point of Sale (POS) plugin for WooCommerce < 1.9.0 - Missing Authorization
Fixed in
Fixed in 1.9.0
CVSS
5.3 (medium)
Published
2025-05-16
Title
WooCommerce POS < 1.7.9 - Missing Authorization
Fixed in
Fixed in 1.7.9
CVSS
5.3 (medium)
Published
2024-03-19
Title
WooCommerce POS < 1.4.12 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
Fixed in
Fixed in 1.4.12
CVSS
4.3 (medium)