Advisories · Technology
Welcart e-Commerce.
Every CVE that names Welcart e-Commerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.8 Low
Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax
- Welcart e-Commerce
- Broken access control
- CVSS 4.7 Medium
Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter
- Welcart e-Commerce
- Open redirect
- CVSS 6.8 Medium
Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter
- Welcart e-Commerce
- SQL injection
- CVSS 7.1 High
WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability
- Welcart e-Commerce
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter
- Welcart e-Commerce
- Authentication bypass
- CVSS 7.1 High
WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability
- Welcart e-Commerce
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement Callback
- Welcart e-Commerce
- CVSS 5.4 Medium
Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product Name
- Welcart e-Commerce
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import
- Welcart e-Commerce
- SQL injection
- CVSS 6.1 Medium
Welcart e-Commerce < 2.9.5 - Reflected XSS
- Welcart e-Commerce
- CVSS 8.8 High
Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
- Welcart e-Commerce
-
Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection
- Welcart e-Commerce
- CVSS 5.4 Medium
Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode
- Welcart e-Commerce
- CVSS 8.8 High
Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation
- Welcart e-Commerce
- CVSS 6.5 Medium
Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access
- Welcart e-Commerce
- CVSS 7.5 High
Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access
- Welcart e-Commerce
- CVSS 6.5 Medium
Welcart e-Commerce < 2.8.4 - Subscriber+ Arbitrary Shipping Method Creation/Update/Deletion
- Welcart e-Commerce
- CVSS 5.4 Medium
Welcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site Scripting
- Welcart e-Commerce