Skip to content
Threat Feed
Subscribe

Product

WCPOS – Point of Sale (POS) Plugin for WooCommerce

1 brief RSS
high advisory

Authenticated Remote Code Execution in WCPOS WordPress Plugin

The WCPOS plugin for WooCommerce is vulnerable to authenticated remote code execution via a template engine misconfiguration that allows injection and execution of arbitrary PHP code.

WCPOS – Point of Sale wordpress rce web-application cve-2026-17581
2t 1c