CVE-2026-91078 | TillKit Plugin up to 1.0.4 on WordPress POS Login Endpoint improper authentication

October 3, 2026 Yanac

A vulnerability classified as critical has been found in TillKit Plugin up to 1.0.4 on WordPress. This issue affects some unknown processing of the component POS Login Endpoint. Performing a manipulation results in improper authentication.

This vulnerability is reported as CVE-2026-91078. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More