plugin
4 known security issues reported for the Mwb Point Of Sale Pos For Woocommerce WordPress plugin. Most recent disclosed Aug 10, 2021.
Running Mwb Point Of Sale Pos For Woocommerce on your site? Check whether your installed version is affected.
Scan your site freeThe MWB Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.0.0. This is due to missing nonce validation and capability checks on several AJAX actions found within the plugin . This makes it possible for authenticated attackers, with low-lev...
Cross-Site Request Forgery (CSRF) Bypass / Unauthorised AJAX Call vulnerability discovered by WPScanTeam in WordPress MWB Point of Sale (POS) for WooCommerce plugin (versions <= 1.0.0).
The MWB Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.0.0. This is due to missing nonce validation and capability checks on several AJAX actions found within the plugin . This makes it possible for authenticated attackers, with low-lev...
The plugin has a logic flaw in the CSRF checks, allowing them to be passed by not providing the related nonce parameter in the request. This could allow attacker to make logged in users do unwanted actions. v1.0.1 fixed the Bypass, however actions are still missing capability checks
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free