Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

appsbd — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting appsbd. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Appsbd develops enterprise software solutions with a core focus on business process automation and workflow management. Historically, their products have been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by their 10 recorded CVEs. Security assessments frequently identify input validation weaknesses and insecure default configurations as recurring problems. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities across their product line suggests potential systemic security gaps that could allow attackers to compromise systems or escalate privileges within affected environments.

CVE ID Title CVSS Severity Published
CVE-2026-57385 WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability — Vitepos CWE-89 8.5 High 2026-07-13
CVE-2026-54841 WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability — Vitepos CWE-201 7.5 High 2026-06-25
CVE-2025-13156 Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution — Vitepos – Point of Sale (POS) for WooCommerce CWE-434 8.8 High 2025-11-21
CVE-2025-39535 WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability — Vitepos CWE-288 7.2 High 2025-04-17
CVE-2025-32642 WordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability — Vite Coupon CWE-352 9.6 Critical 2025-04-09
CVE-2025-22277 WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability — Vitepos CWE-288 8.8 High 2025-04-01
CVE-2024-13866 Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting — Simple Notification CWE-79 6.4 Medium 2025-03-05
CVE-2025-26750 WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability — Vitepos CWE-862 6.5 Medium 2025-02-22
CVE-2024-54242 WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability — Simple Notification CWE-862 6.5 Medium 2024-12-13
CVE-2024-54241 WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability — Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification CWE-862 6.5 Medium 2024-12-13
CVE-2023-47694 WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability — Mini Cart Drawer For WooCommerce CWE-862 5.4 Medium 2024-12-09
CVE-2024-33574 WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability — Vitepos CWE-862 4.3 Medium 2024-05-08

This page lists every published CVE security advisory associated with appsbd. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.