WordPress plugin
Oliver POS – WooCommerce POS for iPhone, iPad & Android security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium2
- Low0
All Oliver POS – WooCommerce POS for iPhone, iPad & Android vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Sensitive Information Exposure to Privilege Escalation ≤2.4.2.3Update to 2.4.2.4 | CVE-2024-13513 | |
| High7.3 | Missing Authorization ≤2.4.2.0Update to 2.4.2.1 | CVE-2024-0702 |
- Critical9.8Sensitive Information Exposure to Privilege Escalation
≤2.4.2.3Update to 2.4.2.4
- High7.3Missing Authorization
≤2.4.2.0Update to 2.4.2.1
Oliver POS – WooCommerce POS for iPhone, iPad & Android: common questions
Does Oliver POS – WooCommerce POS for iPhone, iPad & Android have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Oliver POS – WooCommerce POS for iPhone, iPad & Android: 1 critical, 1 high, 2 medium. None are known to affect version null.
How do I check which version of Oliver POS – WooCommerce POS for iPhone, iPad & Android I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Oliver POS – WooCommerce POS for iPhone, iPad & Android vulnerability?
CVE-2026-6072, published May 19, 2026: Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header. Severity: Medium (CVSS 6.5).
Is any Oliver POS – WooCommerce POS for iPhone, iPad & Android vulnerability listed in CISA KEV?
No. None of the known Oliver POS – WooCommerce POS for iPhone, iPad & Android vulnerabilities is currently listed in the CISA KEV catalog.