Privilege Escalation Vulnerability in FooSales for WooCommerce

CVE-2026-77183

What is CVE-2026-77183?

The FooSales – Point of Sale (POS) plugin for WooCommerce has a vulnerability that allows authenticated attackers to exploit improper user identity validation. Attackers with Cashier-level access can change the email addresses of any user, including administrators, which enables them to reset passwords and gain unauthorized access to accounts. This issue exists in all versions up to and including 1.43.0, emphasizing the need for immediate updates and improved validation mechanisms.

References