WebPOS – Point of Sale for WooCommerce Security & Risk Analysis

wordpress.org/plugins/webpos-point-of-sale-for-woocommerce

Powerful POS with user-friendly front-end interface for physical stores. Sync orders, inventory, and details seamlessly with your online store

100 active installs v1.1.7 PHP 7.0+ WP 5.0+ Updated Jan 21, 2026
ecommercewebposwoo-poswoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WebPOS – Point of Sale for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

WebPOS – Point of Sale for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The plugin "webpos-point-of-sale-for-woocommerce" version 1.1.7 exhibits a generally good security posture, with a strong emphasis on using prepared statements for SQL queries and properly escaping output, which are crucial for preventing common web vulnerabilities. The absence of known CVEs and a clean vulnerability history further indicates a well-maintained and secure plugin. However, a significant concern arises from the static analysis revealing one AJAX handler that lacks authentication checks. This unprotected entry point represents a potential avenue for unauthorized actions if exploited.

Key Concerns

  • Unprotected AJAX handler
Vulnerabilities
None known

WebPOS – Point of Sale for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WebPOS – Point of Sale for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
14 prepared
Unescaped Output
9
463 escaped
Nonce Checks
40
Capability Checks
25
File Operations
0
External Requests
2
Bundled Libraries
0

SQL Query Safety

88% prepared16 total queries

Output Escaping

98% escaped472 total outputs
Data Flows
All sanitized

Data Flow Analysis

4 flows
<orders> (includes\admin\orders.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

WebPOS – Point of Sale for WooCommerce Attack Surface

Entry Points1
Unprotected1

AJAX Handlers 1

authwp_ajax_viwebpos_print_orderincludes\admin\receipt.php:15
WordPress Hooks 81
actioninitincludes\admin\admin.php:8
filterplugin_action_links_webpos-point-of-sale-for-woocommerce/webpos-point-of-sale-for-woocommerce.phpincludes\admin\admin.php:9
filtermanage_edit-shop_order_columnsincludes\admin\orders.php:15
filtermanage_woocommerce_page_wc-orders_columnsincludes\admin\orders.php:16
actionmanage_shop_order_posts_custom_columnincludes\admin\orders.php:17
actionmanage_woocommerce_page_wc-orders_custom_columnincludes\admin\orders.php:18
actionrestrict_manage_postsincludes\admin\orders.php:20
actionwoocommerce_order_list_table_restrict_manage_ordersincludes\admin\orders.php:21
actionwoocommerce_orders_table_query_clausesincludes\admin\orders.php:22
filterposts_whereincludes\admin\orders.php:23
actionadmin_enqueue_scriptsincludes\admin\orders.php:24
actionwoocommerce_admin_order_totals_after_totalincludes\admin\orders.php:25
actionbefore_delete_postincludes\admin\orders.php:26
actionwoocommerce_delete_orderincludes\admin\orders.php:27
filterwoocommerce_order_item_display_meta_keyincludes\admin\orders.php:28
actionwoocommerce_admin_order_data_after_order_detailsincludes\admin\orders.php:29
filterposts_joinincludes\admin\orders.php:136
filterposts_distinctincludes\admin\orders.php:137
filterwoocommerce_gateway_titleincludes\admin\orders.php:176
filtermanage_edit-product_columnsincludes\admin\products.php:16
actionmanage_product_posts_custom_columnincludes\admin\products.php:17
actionwoocommerce_product_options_skuincludes\admin\products.php:18
actionwoocommerce_product_after_variable_attributesincludes\admin\products.php:19
actionwoocommerce_save_product_variationincludes\admin\products.php:24
actionadmin_enqueue_scriptsincludes\admin\products.php:25
actionadmin_menuincludes\admin\receipt.php:11
actionadmin_initincludes\admin\receipt.php:12
actionadmin_enqueue_scriptsincludes\admin\receipt.php:13
actionviwebpos_print_headincludes\admin\receipt.php:16
actionadmin_menuincludes\admin\settings-general.php:10
actionadmin_enqueue_scriptsincludes\admin\settings-general.php:11
actionadmin_initincludes\admin\settings-general.php:12
actionadmin_bar_menuincludes\admin\settings-general.php:13
actionplugins_loadedincludes\admin\settings-general.php:14
actionadmin_menuincludes\admin\transactions.php:8
actionadmin_enqueue_scriptsincludes\admin\transactions.php:9
filterset-screen-optionincludes\admin\transactions.php:10
filterposts_where_requestincludes\frontend\bill-of-sale.php:304
filterwoocommerce_registration_error_email_existsincludes\frontend\customers.php:158
filterauth_cookie_expirationincludes\frontend\frontend.php:16
filterwoocommerce_account_menu_itemsincludes\frontend\frontend.php:17
filterwoocommerce_get_endpoint_urlincludes\frontend\frontend.php:18
actionparse_requestincludes\frontend\frontend.php:19
actioninitincludes\frontend\frontend.php:20
actionsend_headersincludes\frontend\frontend.php:21
filterwoocommerce_email_get_optionincludes\frontend\orders.php:122
filterwoocommerce_order_get_billing_emailincludes\frontend\orders.php:126
filterposts_where_requestincludes\frontend\orders.php:525
actionwoocommerce_orders_table_query_clausesincludes\frontend\orders.php:528
actionviwebpos_before_enqueue_scriptsincludes\frontend\receipt.php:12
filterviwebpos_update_settings_argsincludes\plugins\curcy.php:38
filterviwebpos_settings_fieldsincludes\plugins\curcy.php:39
filterwmc_is_change_priceincludes\plugins\curcy.php:40
filterviwebpos_frontend_paramsincludes\plugins\curcy.php:41
filterviwebpos_set_ajax_eventsincludes\plugins\curcy.php:42
actionviwebpos_before_enqueue_scriptsincludes\plugins\curcy.php:43
filterwmc_get_list_currenciesincludes\plugins\curcy.php:92
filterwmc_get_list_shortcodesincludes\plugins\curcy.php:128
filterwmc_get_list_currenciesincludes\plugins\curcy.php:337
filterviredis_get_product_qty_in_cartincludes\plugins\redis.php:17
filterviredis_may_be_apply_to_userincludes\plugins\redis.php:18
filterviredis_may_be_apply_to_cartincludes\plugins\redis.php:19
filterviwebpos_set_ajax_eventsincludes\plugins\redis.php:20
actionviwebpos_before_enqueue_scriptsincludes\plugins\redis.php:21
filterviwebpos_frontend_paramsincludes\plugins\redis.php:22
actionadmin_enqueue_scriptsincludes\support.php:32
actionadmin_noticesincludes\support.php:33
actionadmin_initincludes\support.php:34
actionadmin_menuincludes\support.php:35
filterplugin_row_metaincludes\support.php:37
actionadmin_initincludes\support.php:39
actionadmin_bar_menuincludes\support.php:41
actionadmin_noticesincludes\support.php:52
actionadmin_footerincludes\support.php:669
actionadmin_bar_menuincludes\support.php:807
actionadmin_noticesincludes\support.php:953
actionbefore_woocommerce_initwebpos-point-of-sale-for-woocommerce.php:33
actionplugins_loadedwebpos-point-of-sale-for-woocommerce.php:38
actionactivated_pluginwebpos-point-of-sale-for-woocommerce.php:39
filterwoocommerce_payment_gatewayswebpos-point-of-sale-for-woocommerce.php:40
actionadmin_initwebpos-point-of-sale-for-woocommerce.php:68
Maintenance & Trust

WebPOS – Point of Sale for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 21, 2026
PHP min version7.0
Downloads9K

Community Trust

Rating74/100
Number of ratings6
Active installs100
Developer Profile

WebPOS – Point of Sale for WooCommerce Developer Profile

VillaTheme

58 plugins · 167K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
214 days
View full developer profile
Detection Fingerprints

How We Detect WebPOS – Point of Sale for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/css/bootstrap.min.css/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/css/fontawesome-all.min.css/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/css/select2.min.css/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/css/style.css/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/bootstrap.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/bootstrap.bundle.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/html2canvas.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/jquery-3.6.0.min.js+14 more
Script Paths
/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/jquery-3.6.0.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/bootstrap.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/bootstrap.bundle.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/select2.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/jquery-ui.min.js/wp-content/plugins/webpos-point-of-sale-for-woocommerce/assets/js/sweetalert2.min.js+12 more
Version Parameters
/webpos-point-of-sale-for-woocommerce/assets/css/style.css?ver=/webpos-point-of-sale-for-woocommerce/assets/js/main.js?ver=/webpos-point-of-sale-for-woocommerce/assets/js/webpos-frontend.js?ver=/webpos-point-of-sale-for-woocommerce/assets/js/webpos-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
webpos-settings-pagewebpos-admin-wrapwebpos-modal-contentwebpos-tabs-contentwebpos-pos-screenwebpos-product-gridwebpos-add-to-cart-buttonwebpos-cart-table+5 more
HTML Comments
<!-- VIWEBPOS_POINT_OF_SALE_FOR_WOO --><!-- VIWEBPOS Admin Settings --><!-- VIWEBPOS Product Table --><!-- VIWEBPOS Customer Table -->+1 more
Data Attributes
data-webpos-product-iddata-webpos-session-iddata-webpos-customer-iddata-webpos-receipt-templatedata-webpos-ajax-url
JS Globals
VIWEBPOS_AJAX_URLVIWEBPOS_DATA
FAQ

Frequently Asked Questions about WebPOS – Point of Sale for WooCommerce