Vendor

    Kilbot

    6 known vulnerabilities in products by Kilbot, 1 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Kilbot
    CriticalCVE-2026-45321

    Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

    In CISA KEVRansomwarealso in 3 other products

    		9.6
    HighCVE-2026-17581

    WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine

    		7.2
    MediumCVE-2026-16078

    Kilbot WCPOS: Path Traversal

    		6.5
    HighCVE-2026-52711

    WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability

    		7.5
    MediumCVE-2025-48117

    WordPress WooCommerce POS plugin <= 1.7.8 - Broken Access Control Vulnerability

    		5.3
    MediumCVE-2024-2384

    Kilbot WCPOS: Insufficient Verification of Data Authenticity

    		4.3

    Products

    Products by Kilbot
    Wcpos – Point Of Sale (pos) Plugin For Woocommerce30