appsbd Vitepos vulnerabilities

Latest appsbd Vitepos CVEs

Newest publication first

1. CVE-2026-105076 WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

   Published 2026-10-08

   High·CVSS 7.6 EPSS 0.22%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.

2. CVE-2026-96815 WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability

   Published 2026-09-30

   High·CVSS 7.2 EPSS 0.31%

   Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

3. CVE-2026-57385 WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability

   Published 2026-07-13

   High·CVSS 8.5 EPSS 0.36%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through <= 3.4.2.

4. CVE-2026-54841 WordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability

   Published 2026-06-25

   High·CVSS 7.5 EPSS 0.42%

   Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.

5. CVE-2025-39535 WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

   Published 2025-04-17

   High·CVSS 7.2 EPSS 0.50%

   Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through <= 3.1.7.

6. CVE-2025-22277 WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

   Published 2025-04-01

   High·CVSS 8.8 EPSS 0.50%

   Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through <= 3.1.4.

7. CVE-2025-26750 WordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability

   Published 2025-02-22

   Medium·CVSS 6.5 EPSS 0.34%

   Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through <= 3.1.3.

8. CVE-2024-33574 WordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability

   Published 2024-05-08

   Medium·CVSS 4.3 EPSS 0.37%

   Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.