Vitepos vulnerabilities

4 known CVE vulnerabilities in Vitepos, translated and rated.

CVE-2026-105076High
The Vitepos plugin (by Appsbd) up to version 3.6.1 contains a Blind SQL Injection vulnerability that allows an attacker to manipulate database queries.
CVE-2026-96815High
Vulnerability in Vitepos plugin up to version 3.5.0 allows privilege escalation through a custom user role.
CVE-2026-57385High
The Vitepos WordPress plugin contains a blind SQL injection vulnerability due to improper neutralization of special elements in SQL commands. This affects versions up to and including 3.4.2.
CVE-2026-54841High
Versions of Vitepos up to 3.4.2 have a vulnerability that allows unauthorized access to sensitive data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS