{"items":[{"id":"CVE-2026-92766","published":"2026-10-16T08:27:42.866Z","updated":"2026-10-16T14:59:31.665Z","title":"Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter","severity":"HIGH","score":7.5,"vendor":"appsbd","product":"Vitepos – Point of Sale (POS) for WooCommerce","kev":false,"epss":0.0033,"kevAdded":null,"exploit":false},{"id":"CVE-2026-109414","published":"2026-10-16T05:30:26.454Z","updated":"2026-10-16T15:09:38.699Z","title":"Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator","severity":"MEDIUM","score":6.5,"vendor":"appsbd","product":"Vitepos – Point of Sale (POS) for WooCommerce","kev":false,"epss":0.00267,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105076","published":"2026-10-08T12:56:35.162Z","updated":"2026-10-08T17:10:45.652Z","title":"WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability","severity":"HIGH","score":7.6,"vendor":"Appsbd","product":"Vitepos","kev":false,"epss":0.0022,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96815","published":"2026-09-30T12:27:29.805Z","updated":"2026-09-30T13:27:11.963Z","title":"WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability","severity":"HIGH","score":7.2,"vendor":"appsbd","product":"Vitepos","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57385","published":"2026-07-13T08:41:23.918Z","updated":"2026-07-13T13:52:49.955Z","title":"WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"appsbd","product":"Vitepos","kev":false,"epss":0.00357,"kevAdded":null,"exploit":false},{"id":"CVE-2026-54841","published":"2026-06-25T13:12:34.241Z","updated":"2026-06-25T14:51:25.429Z","title":"WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"Appsbd","product":"Vitepos","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2025-13156","published":"2025-11-21T08:28:15.190Z","updated":"2026-04-08T17:18:56.867Z","title":"Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"appsbd","product":"Vitepos – Point of Sale (POS) for WooCommerce","kev":false,"epss":0.00735,"kevAdded":null,"exploit":false},{"id":"CVE-2025-39535","published":"2025-04-17T15:46:53.344Z","updated":"2026-04-28T16:12:34.224Z","title":"WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability","severity":"HIGH","score":7.2,"vendor":"appsbd","product":"Vitepos","kev":false,"epss":0.00494,"kevAdded":null,"exploit":false},{"id":"CVE-2025-32642","published":"2025-04-09T16:09:22.376Z","updated":"2026-04-28T16:12:26.824Z","title":"WordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":9.6,"vendor":"appsbd","product":"Vite Coupon","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22277","published":"2025-04-01T05:32:24.249Z","updated":"2026-04-28T16:10:57.813Z","title":"WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability","severity":"HIGH","score":8.8,"vendor":"appsbd","product":"Vitepos","kev":false,"epss":0.005,"kevAdded":null,"exploit":false},{"id":"CVE-2024-13866","published":"2025-03-05T08:21:57.003Z","updated":"2026-04-08T17:30:31.832Z","title":"Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"appsbd","product":"Simple Notification","kev":false,"epss":0.00242,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26750","published":"2025-02-22T15:52:11.429Z","updated":"2026-04-28T16:11:39.960Z","title":"WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"appsbd","product":"Vitepos","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2024-54242","published":"2024-12-13T14:24:35.775Z","updated":"2026-05-11T22:22:49.602Z","title":"WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"appsbd","product":"Simple Notification","kev":false,"epss":0.00362,"kevAdded":null,"exploit":false},{"id":"CVE-2024-54241","published":"2024-12-13T14:24:35.194Z","updated":"2026-04-28T16:10:47.896Z","title":"WordPress Elite Notification  plugin 1.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Appsbd","product":"Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification","kev":false,"epss":0.00362,"kevAdded":null,"exploit":true},{"id":"CVE-2023-47694","published":"2024-12-09T11:30:54.265Z","updated":"2026-04-28T16:08:51.083Z","title":"WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"appsbd","product":"Mini Cart Drawer For WooCommerce","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2024-33574","published":"2024-05-08T13:35:45.860Z","updated":"2026-04-28T16:09:43.341Z","title":"WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"appsbd","product":"Vitepos","kev":false,"epss":0.00373,"kevAdded":null,"exploit":false}]}