Software intelligence
Important: Vitepos appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
2
Latest advisory
7 August 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
vitepos
Plugin
This catalog lists 2 known advisories affecting Vitepos. The most recent was published on 7 August 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Vitepos <= 3.5.0 - Authenticated (Outlet Manager+) Privilege Escalation
May allow a lower-privilege user to perform actions reserved for administrators.
Published 7 August 2026
Vitepos <= 3.5.0 - Authenticated (Administrator+) SQL Injection
May allow attackers to read or modify database contents beyond intended access.
Published 7 August 2026
Known Vitepos advisories published by month.
CVE-2026-14237 · Published 7 August 2026
Affected versions: ≤ 3.5.0
CVE-2026-14238 · Published 7 August 2026
Affected versions: ≤ 3.5.0
SiteRespond Defence matches your installed Vitepos version against this catalog when the Defence plugin is connected to your WordPress site.