CVE-2026-54841
HighCVSS 7.5Summary
Versions of Vitepos up to 3.4.2 have a vulnerability that allows unauthorized access to sensitive data.
Risk Assessment
Organizations may be exposed to the leakage of confidential information, which can lead to serious legal and reputational consequences.
Recommendation
It is recommended to upgrade to the latest version of Vitepos to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Vitepos
See all- CVE-2026-105076High
The Vitepos plugin (by Appsbd) up to version 3.6.1 contains a Blind SQL Injection vulnerability that allows an attacker to manipulate database queries.
- CVE-2026-96815High
Vulnerability in Vitepos plugin up to version 3.5.0 allows privilege escalation through a custom user role.
- CVE-2026-57385High
The Vitepos WordPress plugin contains a blind SQL injection vulnerability due to improper neutralization of special elements in SQL commands. This affects versions up to and including 3.4.2.
Original NVD description (English source)
Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS