OpenPOS Lite – Point of Sale for WooCommerce

OpenPOS Lite – Point of Sale for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for OpenPOS Lite – Point of Sale for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Yudha - DJ. OpenPOS Lite – Point of Sale for WooCommerce is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all OpenPOS Lite – Point of Sale for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-1826

OpenPOS Lite <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Read the full analysis

Vulnerability Records

1 records


2026-02-10 20:07	OpenPOS Lite <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes OpenPOS Lite <= 3.0	`CVE-2026-1826`	6.4 Medium	Muhammad Yudha - DJ	Yes

Showing 1–1 of 1 reports

Latestv3.2

OpenPOS Lite – Point of Sale for WooCommerce

Author

WooCommerce Point Of Sale(POS)

5.0(1)

100/100

Last Updated

2026-03-31 (6mo ago)

Active Installs

60+

Downloads

6,775

Requires WP

4.7+

Requires PHP

Tested up to

WP 6.9.7

Created

2020-12-24 (6y ago)

OpenPOS Lite is a free WooCommerce plugin that connects your physical store’s sales with your online WooCommerce store via the OpenPOS cloud service. Built to integrate seamlessly with WordPress and WooCommerce, OpenPOS Lite includes: A fast and intuitive POS panel for quick order creation. Barcode scanning via camera or hardware barcode device. Save, hold, and resume carts easily. Apply coupons, cart discounts, and item-level discounts. Manage customers and view real-time stock levels. Generate and print barcode labels for products. Manage cash transactions and track cash balances. View live orders from your outlets. Built-in QR code and camera barcode scanner. Secure logoff function — cashiers can log out safely without losing session data. Real-time synchronization of order and stock data between POS and WooCommerce. and much more… After activating the plugin on your WordPress site, you can log in to the POS panel using your WordPress credentials at: 👉 https://pos.wpos.app (Free version only) 💡 Demo Site https://demo.wpos.app/wordpress/wp-admin/ Demo Account: admin / admin123 🎥 Watch the demo video: https://youtu.be/zqCd4Ox3NIk?si=CUv6q0m76N4inOMM Feature Comparison Feature | Free | Pro Real-time Sync: ✅ Yes | ✅ Yes Admin POS Order: ✅ Yes | ✅ Yes Product Barcode: ✅ Yes | ✅ Yes Barcode Scanner: ✅ Yes | ✅ Yes Store Staff: ✅ Yes | ✅ Yes Weight-based Product: ❌ No | ✅ Yes Length-based Product: ❌ No | ✅ Yes POS Settings: ⚙️ Limited | ✅ Full customization Receipt Template: ❌ 1 fixed template | ✅ Unlimited templates Advanced Features Multiple Outlets: 🏪 Online store only | ✅ Unlimited outlets Multiple Registers: 1 register | ✅ Unlimited registers POS Hosting: ☁️ Cloud (pos.wpos.app) | ✅ Self-hosted or cloud option POS Reports: ❌ No | ✅ Yes POS Session Manager: ❌ No | ✅ Yes Stock Manager: ❌ Uses WooCommerce default | ✅ Advanced stock control Admin Reports: ❌ No | ✅ Yes Support: 💬 Community only | 🚀 Priority instant support Premium Version Upgrade to OpenPOS Pro to unlock all advanced features and host your POS directly on your own server. 👉 Get the Premium Version on CodeCanyon Note: The Pro version runs entirely on your WordPress + WooCommerce environment — it does not rely on OpenPOS servers. Login securely using your local credentials only.

View on WordPress.org