WCPOS – Point of Sale (POS) plugin for WooCommerce

woocommerce-pos · by kilbot · wordpress.org ↗ · SVN ↗
Active installs
5k+
Current version
1.9.6
Added
2014-05-02
Last updated
2026-06-17 (15d ago)
First seen by beacon
2mo ago
Total downloads
431,136

Statistics

2024-06-17 → 2026-07-01 · 745 days
Downloads today
149
7-day total 852
Week over week
▼ -68%
vs prior 7 days
30-day trend
flat
▲ +67% MoM
Abandonment
○○○○○
healthy
Downloads/day Linear trend
2k1k93146502024-062024-102025-022025-062025-102026-022026-07
1k99566333202026-042026-042026-052026-052026-062026-06
1k99566333202026-062026-062026-062026-062026-062026-06

Active versions

1.91.71.80.4other
1.9 · 48.4%1.7 · 16.9%1.8 · 14.6%0.4 · 11.6%other · 8.5%

Ratings

5★
50
4★
3
3★
2
2★
5
1★
21

Support: 0/2 resolved

Alerts (0)

No open alerts.

Show 1 resolved alert
Medium code_scan_delta Resolved · fp_base64_benign_data_handling 2026-07-02 03:55:05 (1d ago)
Slugwoocommerce-pos
Previous version1.9.1
Current version1.9.6
New findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinvendor_prefixed/dompdf/dompdf/lib/Cpdf.php1,392$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \base64_decode($this->fonts[$fontFileName]['CIDtoGID']);medium
base64_decodebuiltinvendor_prefixed/dompdf/dompdf/lib/Cpdf.php2,238$signature = \base64_decode(\trim($signature));medium
eval_callbuiltinvendor_prefixed/dompdf/dompdf/src/Adapter/PDFLib.php1,097eval($callback);medium
eval_callbuiltinvendor_prefixed/dompdf/dompdf/src/Adapter/CPDF.php692eval($callback);medium
eval_callbuiltinvendor_prefixed/dompdf/dompdf/src/PhpEvaluator.php47eval($code);medium
base64_decodebuiltinvendor_prefixed/dompdf/dompdf/src/Helpers.php281$result = ['charset' => $match['charset'] ? $match['charset'] : 'US-ASCII', 'mime' => $match['mime'] ? $match['mime'] : 'text/plain', 'data' => $match['base64'] ? \base64_decode($match['data']medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfacePDFLib.php154$data = \base64_decode(\substr($data, 7));medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php1,288$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \base64_decode($this->fonts[$fontFileName]['CIDtoGID']);medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php2,093$signature = \base64_decode(\trim($signature));medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php152$data = \base64_decode($data);medium
base64_decodebuiltinincludes/Services/Print_Job_Service.php292$payload = base64_decode( (string) $job['payload'], true );medium
New finding count11
View raw JSON
{
    "slug": "woocommerce-pos",
    "previous_version": "1.9.1",
    "current_version": "1.9.6",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/lib/Cpdf.php",
            "line": 1392,
            "snippet": "$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \\base64_decode($this->fonts[$fontFileName]['CIDtoGID']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/lib/Cpdf.php",
            "line": 2238,
            "snippet": "$signature = \\base64_decode(\\trim($signature));",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/Adapter/PDFLib.php",
            "line": 1097,
            "snippet": "eval($callback);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/Adapter/CPDF.php",
            "line": 692,
            "snippet": "eval($callback);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/PhpEvaluator.php",
            "line": 47,
            "snippet": "eval($code);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/Helpers.php",
            "line": 281,
            "snippet": "$result = ['charset' => $match['charset'] ? $match['charset'] : 'US-ASCII', 'mime' => $match['mime'] ? $match['mime'] : 'text/plain', 'data' => $match['base64'] ? \\base64_decode($match['data']",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfacePDFLib.php",
            "line": 154,
            "snippet": "$data = \\base64_decode(\\substr($data, 7));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php",
            "line": 1288,
            "snippet": "$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \\base64_decode($this->fonts[$fontFileName]['CIDtoGID']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php",
            "line": 2093,
            "snippet": "$signature = \\base64_decode(\\trim($signature));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php",
            "line": 152,
            "snippet": "$data = \\base64_decode($data);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/Services/Print_Job_Service.php",
            "line": 292,
            "snippet": "$payload = base64_decode( (string) $job['payload'], true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 11
}

SVN committers (2)

Accounts with actual commit access to woocommerce-pos on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
kilbot 2006-01-14 282 2014-05-02 · r906708 2026-06-15 · r3573284
plugin-master 2007-03-09 1 2014-05-02 · r906588 2014-05-02 · r906588

Readme contributors (1)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
kilbot 2006-01-14 282 commits Active

Versions (100 most recent)

Version Released Download
1.9.6 zip
1.9.5 zip
1.9.2 zip
1.9.3 zip
1.9.4 zip
1.9.1 2026-05-19 · 1mo ago zip
1.9.0 2026-05-15 · 1mo ago zip
1.8.14 2026-02-19 · 4mo ago zip
1.8.13 2026-02-17 · 4mo ago zip
1.8.12 2026-02-13 · 4mo ago zip
1.8.11 2026-02-13 · 4mo ago zip
1.8.9 2026-02-11 · 4mo ago zip
1.8.8 2026-02-06 · 4mo ago zip
1.8.7 2026-01-13 · 5mo ago zip
1.8.6 2026-01-06 · 5mo ago zip
1.8.5 2026-01-05 · 5mo ago zip
1.8.4 2026-01-05 · 5mo ago zip
1.8.3 2026-01-04 · 5mo ago zip
1.8.2 2025-12-19 · 6mo ago zip
1.8.1 2025-12-19 · 6mo ago zip
1.8.0 2025-12-18 · 6mo ago zip
1.7.14 2025-11-19 · 7mo ago zip
1.7.13 2025-11-13 · 7mo ago zip
1.7.12 2025-11-13 · 7mo ago zip
1.7.11 2025-06-18 · 1y ago zip
1.7.10 2025-05-27 · 1y ago zip
1.7.9 2025-05-21 · 1y ago zip
1.7.8 2025-05-06 · 1y ago zip
1.7.7 2025-04-14 · 1y ago zip
1.7.6 2025-04-14 · 1y ago zip
1.7.5 2025-04-09 · 1y ago zip
1.7.4 2025-03-22 · 1y ago zip
1.7.3 2025-03-21 · 1y ago zip
1.7.2 2024-12-27 · 1y ago zip
1.7.1 2024-11-20 · 1y ago zip
1.7.0 2024-11-13 · 1y ago zip
1.6.6 2024-09-05 · 1y ago zip
1.6.5 2024-09-04 · 1y ago zip
1.6.4 2024-09-04 · 1y ago zip
1.6.3 2024-06-29 · 2y ago zip
1.6.2 2024-06-20 · 2y ago zip
1.6.1 2024-06-18 · 2y ago zip
1.6.0 2024-06-12 · 2y ago zip
1.5.1 2024-06-03 · 2y ago zip
1.5.0 2024-06-03 · 2y ago zip
1.4.16 2024-03-28 · 2y ago zip
1.4.15 2024-03-24 · 2y ago zip
1.4.14 2024-03-20 · 2y ago zip
1.4.13 2024-03-20 · 2y ago zip
1.4.12 2024-03-18 · 2y ago zip
1.4.11 2024-03-09 · 2y ago zip
1.4.10 2024-01-23 · 2y ago zip
1.4.9 2024-01-21 · 2y ago zip
1.4.8 2024-01-21 · 2y ago zip
1.4.7 2024-01-18 · 2y ago zip
1.4.6 2024-01-16 · 2y ago zip
1.4.5 2024-01-14 · 2y ago zip
1.4.4 2024-01-12 · 2y ago zip
1.4.3 2024-01-12 · 2y ago zip
1.4.2 2024-01-12 · 2y ago zip
1.4.1 2024-01-11 · 2y ago zip
1.4.0 2024-01-11 · 2y ago zip
1.3.12 2023-09-29 · 2y ago zip
1.3.11 2023-09-27 · 2y ago zip
1.3.10 2023-08-29 · 2y ago zip
1.3.9 2023-08-18 · 2y ago zip
1.3.8 2023-08-08 · 2y ago zip
1.3.7 2023-07-31 · 2y ago zip
1.3.6.1 2023-07-31 · 2y ago zip
1.3.5 2023-07-29 · 2y ago zip
1.3.4 2023-07-29 · 2y ago zip
1.3.3 2023-07-28 · 2y ago zip
1.3.2 2023-07-27 · 2y ago zip
1.3.1 2023-07-27 · 2y ago zip
1.3.0 2023-07-27 · 2y ago zip
1.2.4 2023-06-25 · 3y ago zip
1.2.3 2023-06-21 · 3y ago zip
1.2.2 2023-06-21 · 3y ago zip
1.2.1 2023-06-12 · 3y ago zip
1.2.0 2023-06-12 · 3y ago zip
1.1.0 2023-05-19 · 3y ago zip
1.0.2 2023-05-05 · 3y ago zip
1.0.1 2023-05-05 · 3y ago zip
1.0.0 2023-05-03 · 3y ago zip
1.0.0-rc.1 2023-05-01 · 3y ago zip
1.0.0-beta.4 2023-04-06 · 3y ago zip
1.0.0-beta.3 2023-04-04 · 3y ago zip
1.0.0-beta.2 2023-03-27 · 3y ago zip
1.0.0-beta.1 2023-03-18 · 3y ago zip
1.0.0-alpha.3 2023-03-04 · 3y ago zip
1.0.0-alpha.2 2023-02-07 · 3y ago zip
1.0.0-alpha.1 2023-01-09 · 3y ago zip
0.4.27 2023-01-09 · 3y ago zip
0.4.26 2021-03-30 · 5y ago zip
0.4.25 2020-11-11 · 5y ago zip
0.4.24 2020-04-02 · 6y ago zip
0.4.23 2019-04-22 · 7y ago zip
0.4.22 2019-04-19 · 7y ago zip
0.4.21 2018-11-27 · 7y ago zip
0.4.20 2018-10-23 · 7y ago zip