8.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in infosoftplugin WooCommerce Point Of Sale (POS) allows SQL Injection. This issue affects WooCommerce Point Of Sale (POS): from n/a through 1.4.
Basic Information
ID
CVE-2025-52820
Source
Patchstack
Published
Aug 14, 2025 at 10:33
Affected Product
Vendor
infosoftplugin
Product
WooCommerce Point Of Sale (POS)
Version
n/a
Affected Versions
infosoftplugin WooCommerce Point Of Sale (POS) n/a