getdokan vulnerabilities

Products

• getdokan/wepos 1

Latest getdokan CVEs

Newest publication first

1. CVE-2026-121993 wePOS before 2.0.3 Missing Authorization via payment/process Endpoint

   Published 2026-11-04

   Medium·CVSS 5.3 EPSS 0.25%

   wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by supplying another order's ID. Attackers with...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.