Extension WordPress
Vulnérabilités Oliver POS – WooCommerce POS for iPhone, iPad & Android
Cette page rassemble les failles publiées pour Oliver POS – WooCommerce POS for iPhone, iPad & Android, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Oliver POS – WooCommerce POS for iPhone, iPad & Android
4 fiches
Oliver POS <= 2.4.2.6 – Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header
The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.4.2.6. The plugin protects its entire /wp-json/pos-bridge/* REST API namespace…
*-2.4.2.6
4.5.4
19/05/2026
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 – Sensitive Information Exposure to Privilege Escalation
The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.2.3 via the logging functionality. This makes it possible for unauthenticated attackers…
*-2.4.2.3
2.4.2.4
14/02/2025
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.1.8 – Cross-Site Request Forgery
The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1.8. This is due to missing or incorrect nonce validation in the…
*-2.4.1.8
2.4.1.9
27/02/2024
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.1 – Missing Authorization
The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions hooked via AJAX in the includes/class-pos-bridge-install.php file in all versions up to,…
*-2.4.2.0
2.4.2.1
19/02/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.