agentprime: uscnanbu-welcart-e-commerceEvery new CVE for uscnanbu-welcart-e-commerce.https://agentprime.io/CVE-2026-119166: Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameterhttps://agentprime.io/advisories/CVE-2026-119166/https://agentprime.io/advisories/CVE-2026-119166/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 06:44:23 GMTCVECVE-2026-118070: Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameterhttps://agentprime.io/advisories/CVE-2026-118070/https://agentprime.io/advisories/CVE-2026-118070/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 06:44:21 GMTCVECVE-2026-107752: Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookiehttps://agentprime.io/advisories/CVE-2026-107752/https://agentprime.io/advisories/CVE-2026-107752/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 03:43:27 GMTCVECVE-2026-87091: Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parametershttps://agentprime.io/advisories/CVE-2026-87091/https://agentprime.io/advisories/CVE-2026-87091/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 05:29:17 GMTCVECVE-2026-19887: Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callbackhttps://agentprime.io/advisories/CVE-2026-19887/https://agentprime.io/advisories/CVE-2026-19887/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 06:37:57 GMTCVECVE-2026-19914: Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameterhttps://agentprime.io/advisories/CVE-2026-19914/https://agentprime.io/advisories/CVE-2026-19914/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 09:28:20 GMTCVECVE-2025-12979: Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposurehttps://agentprime.io/advisories/CVE-2025-12979/https://agentprime.io/advisories/CVE-2025-12979/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 03:27:37 GMTCVECVE-2025-10651: Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mailhttps://agentprime.io/advisories/CVE-2025-10651/https://agentprime.io/advisories/CVE-2025-10651/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 05:27:56 GMTCVECVE-2025-10649: Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookiehttps://agentprime.io/advisories/CVE-2025-10649/https://agentprime.io/advisories/CVE-2025-10649/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Oct 2025 11:16:54 GMTCVECVE-2025-9367: Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-9367/https://agentprime.io/advisories/CVE-2025-9367/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Sep 2025 06:38:47 GMTCVECVE-2025-0511: Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameterhttps://agentprime.io/advisories/CVE-2025-0511/https://agentprime.io/advisories/CVE-2025-0511/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Feb 2025 11:11:16 GMTCVECVE-2023-6120: Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversalhttps://agentprime.io/advisories/CVE-2023-6120/https://agentprime.io/advisories/CVE-2023-6120/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 09 Dec 2023 06:52:00 GMTCVECVE-2021-4375: Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosurehttps://agentprime.io/advisories/CVE-2021-4375/https://agentprime.io/advisories/CVE-2021-4375/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jun 2023 01:51:45 GMTCVECVE-2021-4355: Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosurehttps://agentprime.io/advisories/CVE-2021-4355/https://agentprime.io/advisories/CVE-2021-4355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jun 2023 01:51:24 GMTCVE