WCPOS – Point of Sale (POS) plugin for WooCommerce

woocommerce-pos · by kilbot · wordpress.org ↗ · SVN ↗
Active installs
5k+
Current version
1.9.12
Added
2014-05-02
Last updated
2026-07-24 (18d ago)
First seen by beacon
3mo ago
Total downloads
440,640

Statistics

2024-06-17 → 2026-07-25 · 769 days
Downloads today
1,843
7-day total 5,761
Week over week
▲ +107%
vs prior 7 days
30-day trend
flat
▼ -1% MoM
Abandonment
○○○○○
healthy
Downloads/day Linear trend
2k1k93146502024-062024-102025-022025-072025-112026-032026-07
2k1k92246102026-042026-052026-052026-062026-062026-07
2k1k92246102026-062026-072026-072026-072026-072026-07

Active versions

1.91.70.41.8other
1.9 · 54.6%1.7 · 14.7%0.4 · 11.4%1.8 · 11.3%other · 8.0%

Ratings

5★
50
4★
3
3★
2
2★
5
1★
21

Support: 0/2 resolved

Alerts (0)

No open alerts.

Show 1 resolved alert
Medium code_scan_delta Resolved · fp_base64_benign_data_handling 2026-07-02 03:55:05 (1mo ago)
Slugwoocommerce-pos
Previous version1.9.1
Current version1.9.6
New findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinvendor_prefixed/dompdf/dompdf/lib/Cpdf.php1,392$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \base64_decode($this->fonts[$fontFileName]['CIDtoGID']);medium
base64_decodebuiltinvendor_prefixed/dompdf/dompdf/lib/Cpdf.php2,238$signature = \base64_decode(\trim($signature));medium
eval_callbuiltinvendor_prefixed/dompdf/dompdf/src/Adapter/PDFLib.php1,097eval($callback);medium
eval_callbuiltinvendor_prefixed/dompdf/dompdf/src/Adapter/CPDF.php692eval($callback);medium
eval_callbuiltinvendor_prefixed/dompdf/dompdf/src/PhpEvaluator.php47eval($code);medium
base64_decodebuiltinvendor_prefixed/dompdf/dompdf/src/Helpers.php281$result = ['charset' => $match['charset'] ? $match['charset'] : 'US-ASCII', 'mime' => $match['mime'] ? $match['mime'] : 'text/plain', 'data' => $match['base64'] ? \base64_decode($match['data']medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfacePDFLib.php154$data = \base64_decode(\substr($data, 7));medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php1,288$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \base64_decode($this->fonts[$fontFileName]['CIDtoGID']);medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php2,093$signature = \base64_decode(\trim($signature));medium
base64_decodebuiltinvendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php152$data = \base64_decode($data);medium
base64_decodebuiltinincludes/Services/Print_Job_Service.php292$payload = base64_decode( (string) $job['payload'], true );medium
New finding count11
View raw JSON
{
    "slug": "woocommerce-pos",
    "previous_version": "1.9.1",
    "current_version": "1.9.6",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/lib/Cpdf.php",
            "line": 1392,
            "snippet": "$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \\base64_decode($this->fonts[$fontFileName]['CIDtoGID']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/lib/Cpdf.php",
            "line": 2238,
            "snippet": "$signature = \\base64_decode(\\trim($signature));",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/Adapter/PDFLib.php",
            "line": 1097,
            "snippet": "eval($callback);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/Adapter/CPDF.php",
            "line": 692,
            "snippet": "eval($callback);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/PhpEvaluator.php",
            "line": 47,
            "snippet": "eval($code);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/dompdf/src/Helpers.php",
            "line": 281,
            "snippet": "$result = ['charset' => $match['charset'] ? $match['charset'] : 'US-ASCII', 'mime' => $match['mime'] ? $match['mime'] : 'text/plain', 'data' => $match['base64'] ? \\base64_decode($match['data']",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfacePDFLib.php",
            "line": 154,
            "snippet": "$data = \\base64_decode(\\substr($data, 7));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php",
            "line": 1288,
            "snippet": "$tmp = $this->fonts[$fontFileName]['CIDtoGID'] = \\base64_decode($this->fonts[$fontFileName]['CIDtoGID']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/CPdf.php",
            "line": 2093,
            "snippet": "$signature = \\base64_decode(\\trim($signature));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/dompdf/php-svg-lib/src/Svg/Surface/SurfaceCpdf.php",
            "line": 152,
            "snippet": "$data = \\base64_decode($data);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/Services/Print_Job_Service.php",
            "line": 292,
            "snippet": "$payload = base64_decode( (string) $job['payload'], true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 11
}

SVN committers (2)

Accounts with actual commit access to woocommerce-pos on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
kilbot 2006-01-14 292 2014-05-02 · r906708 2026-07-24 · r3621791
plugin-master 2007-03-09 1 2014-05-02 · r906588 2014-05-02 · r906588

Readme contributors (1)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
kilbot 2006-01-14 292 commits Active

Versions (100 most recent)

Version Released Download
1.9.7 zip
1.9.9 zip
1.9.10 zip
1.9.11 zip
1.9.12 zip
1.9.6 zip
1.9.5 zip
1.9.2 zip
1.9.3 zip
1.9.4 zip
1.9.1 2026-05-19 · 2mo ago zip
1.9.0 2026-05-15 · 2mo ago zip
1.8.14 2026-02-19 · 5mo ago zip
1.8.13 2026-02-17 · 5mo ago zip
1.8.12 2026-02-13 · 5mo ago zip
1.8.11 2026-02-13 · 5mo ago zip
1.8.9 2026-02-11 · 6mo ago zip
1.8.8 2026-02-06 · 6mo ago zip
1.8.7 2026-01-13 · 7mo ago zip
1.8.6 2026-01-06 · 7mo ago zip
1.8.5 2026-01-05 · 7mo ago zip
1.8.4 2026-01-05 · 7mo ago zip
1.8.3 2026-01-04 · 7mo ago zip
1.8.2 2025-12-19 · 7mo ago zip
1.8.1 2025-12-19 · 7mo ago zip
1.8.0 2025-12-18 · 7mo ago zip
1.7.14 2025-11-19 · 8mo ago zip
1.7.13 2025-11-13 · 9mo ago zip
1.7.12 2025-11-13 · 9mo ago zip
1.7.11 2025-06-18 · 1y ago zip
1.7.10 2025-05-27 · 1y ago zip
1.7.9 2025-05-21 · 1y ago zip
1.7.8 2025-05-06 · 1y ago zip
1.7.7 2025-04-14 · 1y ago zip
1.7.6 2025-04-14 · 1y ago zip
1.7.5 2025-04-09 · 1y ago zip
1.7.4 2025-03-22 · 1y ago zip
1.7.3 2025-03-21 · 1y ago zip
1.7.2 2024-12-27 · 1y ago zip
1.7.1 2024-11-20 · 1y ago zip
1.7.0 2024-11-13 · 1y ago zip
1.6.6 2024-09-05 · 1y ago zip
1.6.5 2024-09-04 · 1y ago zip
1.6.4 2024-09-04 · 1y ago zip
1.6.3 2024-06-29 · 2y ago zip
1.6.2 2024-06-20 · 2y ago zip
1.6.1 2024-06-18 · 2y ago zip
1.6.0 2024-06-12 · 2y ago zip
1.5.1 2024-06-03 · 2y ago zip
1.5.0 2024-06-03 · 2y ago zip
1.4.16 2024-03-28 · 2y ago zip
1.4.15 2024-03-24 · 2y ago zip
1.4.14 2024-03-20 · 2y ago zip
1.4.13 2024-03-20 · 2y ago zip
1.4.12 2024-03-18 · 2y ago zip
1.4.11 2024-03-09 · 2y ago zip
1.4.10 2024-01-23 · 2y ago zip
1.4.9 2024-01-21 · 2y ago zip
1.4.8 2024-01-21 · 2y ago zip
1.4.7 2024-01-18 · 2y ago zip
1.4.6 2024-01-16 · 2y ago zip
1.4.5 2024-01-14 · 2y ago zip
1.4.4 2024-01-12 · 2y ago zip
1.4.3 2024-01-12 · 2y ago zip
1.4.2 2024-01-12 · 2y ago zip
1.4.1 2024-01-11 · 2y ago zip
1.4.0 2024-01-11 · 2y ago zip
1.3.12 2023-09-29 · 2y ago zip
1.3.11 2023-09-27 · 2y ago zip
1.3.10 2023-08-29 · 2y ago zip
1.3.9 2023-08-18 · 2y ago zip
1.3.8 2023-08-08 · 3y ago zip
1.3.7 2023-07-31 · 3y ago zip
1.3.6.1 2023-07-31 · 3y ago zip
1.3.5 2023-07-29 · 3y ago zip
1.3.4 2023-07-29 · 3y ago zip
1.3.3 2023-07-28 · 3y ago zip
1.3.2 2023-07-27 · 3y ago zip
1.3.1 2023-07-27 · 3y ago zip
1.3.0 2023-07-27 · 3y ago zip
1.2.4 2023-06-25 · 3y ago zip
1.2.3 2023-06-21 · 3y ago zip
1.2.2 2023-06-21 · 3y ago zip
1.2.1 2023-06-12 · 3y ago zip
1.2.0 2023-06-12 · 3y ago zip
1.1.0 2023-05-19 · 3y ago zip
1.0.2 2023-05-05 · 3y ago zip
1.0.1 2023-05-05 · 3y ago zip
1.0.0 2023-05-03 · 3y ago zip
1.0.0-rc.1 2023-05-01 · 3y ago zip
1.0.0-beta.4 2023-04-06 · 3y ago zip
1.0.0-beta.3 2023-04-04 · 3y ago zip
1.0.0-beta.2 2023-03-27 · 3y ago zip
1.0.0-beta.1 2023-03-18 · 3y ago zip
1.0.0-alpha.3 2023-03-04 · 3y ago zip
1.0.0-alpha.2 2023-02-07 · 3y ago zip
1.0.0-alpha.1 2023-01-09 · 3y ago zip
0.4.27 2023-01-09 · 3y ago zip
0.4.26 2021-03-30 · 5y ago zip
0.4.25 2020-11-11 · 5y ago zip