kilbot vulnerabilities
5 published CVEs name kilbot among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-17581
WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine
kilbot · WCPOS – Point of Sale (POS) plugin for WooCommerce
High7.2 - CVE-2026-16078
WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter
kilbot · WCPOS – Point of Sale (POS) plugin for WooCommerce
Medium6.5 - CVE-2026-52711
WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability
kilbot · WooCommerce POS
High7.5 - CVE-2025-48117
WordPress WooCommerce POS plugin <= 1.7.8 - Broken Access Control Vulnerability
kilbot · WooCommerce POS
Medium5.3 - CVE-2024-2384
WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
kilbot · WCPOS – Point of Sale (POS) plugin for WooCommerce
Medium4.3