Most severe vulnerabilities for vendor "appsbd"

Where

Sort:

Software

appsbd vitepos

appsbd vitepos lite

appsbd best support system

appsbd mini cart drawer for woocommerce

appsbd vite coupon

appsbd vitepos (wordpress plugin)

appsbd vitepos wordpress plugin

Appsbd Vite CouponWordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability

Risk 61

Severity

EPSS

0.03%

CSRF

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in appsbd Vite Coupon allows Remote Code Inclusion. This issue affects Vite Coupon: from n/a through 1.0.7.

1 / 2

Source: NVD

First published (updated )

CVE-2025-32642

Appsbd ViteposWordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Risk 79

Severity

8.8

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos allows Authentication Abuse. This issue affects Vitepos: from n/a through 3.1.4.

1 / 2

Source: NVD

Remedy

Update the WordPress Vitepos – Point of sale (POS) plugin for WooCommerce plugin to the latest available version (at least 3.1.5).

First published (updated )

CVE-2025-22277

Appsbd ViteposWordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

Risk 47

Severity

7.6

SQL Injection

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.

First published (updated )

CVE-2026-105076

Appsbd ViteposWordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

Risk 49

Severity

7.2

EPSS

0.06%

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos allows Authentication Abuse. This issue affects Vitepos: from n/a through 3.1.7.

1 / 2

Source: NVD

First published (updated )

CVE-2025-39535

Appsbd Mini Cart Drawer For WooCommerceWordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability

Risk 34

Severity

5.4

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce woo-mini-cart-drawer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mini Cart Drawer For WooCommerce: from n/a through <= 4.0.0.

Remedy

No patched version is available.

First published (updated )

CVE-2023-47694

Appsbd Best Support SystemXSS

Risk 34

Severity

5.4

XSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.

First published (updated )

CVE-2020-24963

Appsbd Vitepos (WordPress plugin)WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability

Risk 16

Severity

4.3

EPSS

0.04%

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1.

Remedy

Update to 3.0.2 or a higher version.

First published (updated )

CVE-2024-33574

Trending

Vendor Risk Score

Software

Appsbd Vite CouponWordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability

Appsbd ViteposWordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Remedy

Appsbd ViteposWordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

Appsbd ViteposWordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

Appsbd Mini Cart Drawer For WooCommerceWordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability

Remedy

Appsbd Best Support SystemXSS

Appsbd Vitepos (WordPress plugin)WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability

Remedy

Company

Resources

Contact