Sploitus

13 exploited vulnerabilities in Open Source Point Of Sale

Vulnerabilities with publicly known exploits

Vendors
Ellislab, Unknown, Opensourcepos, Git
With known exploits
13
Affected Opensourcepos Open Source Point Of Sale versions
≤ 3.4.2, 3.4.1, 3.3.7, 3.4.3

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2026-32888
CVSS 8.8 HIGH 2026-03-20
CVE-2025-68434 3 exploits
CVSS 8.8 HIGH 2025-12-17FIX AVAILABLE
📄 OpenSourcePOS 3.4.1 Cross Site Request ForgeryExploit for CVE-2025-68147
CVE-2025-68147 3 exploits
CVSS 8.1 HIGH 2025-12-17FIX AVAILABLE
Exploit for CVE-2025-68147Exploit for CVE-2025-68147
CVE-2025-63800
CVSS 7.5 HIGH 2025-11-18FIX AVAILABLE
CVE-2025-66923
CVSS 7.2 HIGH 2025-12-17FIX AVAILABLE
CVE-2025-66921
CVSS 7.2 HIGH 2025-12-17FIX AVAILABLE
CVE-2022-34578
CVSS 7.2 HIGH 2022-07-28
CVE-2026-33730
CVSS 6.5 MEDIUM 2026-03-27FIX AVAILABLE
CVE-2025-70095
CVSS 6.5 MEDIUM 2026-02-13
CVE-2025-66924
CVSS 6.1 MEDIUM 2025-12-17FIX AVAILABLE
CVE-2026-39380
CVSS 5.4 MEDIUM 2026-04-07FIX AVAILABLE
CVE-2026-8802
CVSS 5.3 MEDIUM 2026-05-18FIX AVAILABLE
CVE-2025-68658
CVSS 4.8 MEDIUM 2026-01-13FIX AVAILABLE