wepos_point_of_sale_pos_for_woocommerce_dokan vulnerabilities

CVEs whose affected-version data names the wepos_point_of_sale_pos_for_woocommerce_dokan package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121993Medium· 4.3

2d ago

wePOS before 2.0.3 Missing Authorization via payment/process Endpoint

wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing authorization vulnerability in the wepos/v1/payment/process REST route that allows authenticated vendor-level users to mark arbitrary orders as paid and completed by s…

▾ Sunlitwedevs · wePOS – Point Of Sale (POS) for WooCommerce & Dokanvia CVEORG