CPE
An authentication flaw in FooSales POS for WooCommerce (<= 1.43.0) allows authenticated users with cashier permissions to perform account takeover by modifying arbitrary user email addresses.