All 4 CVE vulnerabilities found in Oliver POS – A WooCommerce Point of Sale (POS), with AI-generated Chinese analysis, references, and POCs.
Vendor: oliverpos
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-6072 | Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header CWE-639 | 6.5 | Medium | 2026-05-20 |
| CVE-2024-13513 | Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation CWE-862 | 9.8 | Critical | 2025-02-15 |
| CVE-2024-1954 | Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.1.8 - Cross-Site Request Forgery CWE-352 | 6.3 | Medium | 2024-02-28 |
| CVE-2024-0702 | Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.1 - Missing Authorization CWE-862 | 7.3 | High | 2024-02-20 |
All 4 known CVE vulnerabilities affecting Oliver POS – A WooCommerce Point of Sale (POS) with full Chinese analysis, references, and POCs where available.