Vulnerabilities

TI-2024-25241 CVE-2024-37935 · GHSA-4px4-8gjq-r2q2

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Sensitive Data Exposure vulnerability

LOW 39

Missing Authorization vulnerability in anhvnit Woocommerce OpenPos allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00423 Published 2024-08-13 No fix listed CWE-862

TI-2024-25238 CVE-2024-37932 · GHSA-cf87-3r9r-3m95

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Arbitrary File Deletion vulnerability

HIGH 76

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in anhvnit Woocommerce OpenPos allows File Manipulation.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00589 Published 2024-07-12 No fix listed CWE-22

TI-2024-25239 CVE-2024-37933 · GHSA-6xvm-2cc8-jpr6

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated SQL Injection vulnerability

HIGH 79

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anhvnit Woocommerce OpenPos.This issue affects Woocommerce OpenPos: from n/a through 6.4.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00412 Published 2024-07-12 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Sensitive Data Exposure vulnerability

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Arbitrary File Deletion vulnerability

WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated SQL Injection vulnerability