agentprime: welcart-e-commerceEvery new CVE for welcart-e-commerce.https://agentprime.io/CVE-2026-111032: Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajaxhttps://agentprime.io/advisories/CVE-2026-111032/https://agentprime.io/advisories/CVE-2026-111032/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:00:24 GMTCVECVE-2026-111031: Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameterhttps://agentprime.io/advisories/CVE-2026-111031/https://agentprime.io/advisories/CVE-2026-111031/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:00:24 GMTCVECVE-2026-111027: Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameterhttps://agentprime.io/advisories/CVE-2026-111027/https://agentprime.io/advisories/CVE-2026-111027/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:00:24 GMTCVECVE-2026-96761: WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-96761/https://agentprime.io/advisories/CVE-2026-96761/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 10:00:22 GMTCVECVE-2025-15671: Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameterhttps://agentprime.io/advisories/CVE-2025-15671/https://agentprime.io/advisories/CVE-2025-15671/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 06:00:15 GMTCVECVE-2026-27539: WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-27539/https://agentprime.io/advisories/CVE-2026-27539/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:36:20 GMTCVECVE-2026-15213: Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement Callbackhttps://agentprime.io/advisories/CVE-2026-15213/https://agentprime.io/advisories/CVE-2026-15213/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 11:23:58 GMTCVECVE-2026-16066: Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product Namehttps://agentprime.io/advisories/CVE-2026-16066/https://agentprime.io/advisories/CVE-2026-16066/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 06:00:14 GMTCVECVE-2026-16065: Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Importhttps://agentprime.io/advisories/CVE-2026-16065/https://agentprime.io/advisories/CVE-2026-16065/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 06:00:11 GMTCVECVE-2023-5951: Welcart e-Commerce < 2.9.5 - Reflected XSShttps://agentprime.io/advisories/CVE-2023-5951/https://agentprime.io/advisories/CVE-2023-5951/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Dec 2023 21:28:42 GMTCVECVE-2023-5953: Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2023-5953/https://agentprime.io/advisories/CVE-2023-5953/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Dec 2023 21:28:03 GMTCVECVE-2023-5952: Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injectionhttps://agentprime.io/advisories/CVE-2023-5952/https://agentprime.io/advisories/CVE-2023-5952/Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Dec 2023 21:27:54 GMTCVECVE-2022-4655: Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcodehttps://agentprime.io/advisories/CVE-2022-4655/https://agentprime.io/advisories/CVE-2022-4655/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jan 2023 15:37:55 GMTCVECVE-2022-4237: Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisationhttps://agentprime.io/advisories/CVE-2022-4237/https://agentprime.io/advisories/CVE-2022-4237/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jan 2023 21:49:40 GMTCVECVE-2022-4236: Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Accesshttps://agentprime.io/advisories/CVE-2022-4236/https://agentprime.io/advisories/CVE-2022-4236/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jan 2023 21:49:30 GMTCVECVE-2022-4140: Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Accesshttps://agentprime.io/advisories/CVE-2022-4140/https://agentprime.io/advisories/CVE-2022-4140/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jan 2023 21:49:12 GMTCVECVE-2022-3946: Welcart e-Commerce < 2.8.4 - Subscriber+ Arbitrary Shipping Method Creation/Update/Deletionhttps://agentprime.io/advisories/CVE-2022-3946/https://agentprime.io/advisories/CVE-2022-3946/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Dec 2022 17:54:55 GMTCVECVE-2022-3935: Welcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2022-3935/https://agentprime.io/advisories/CVE-2022-3935/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Dec 2022 17:54:42 GMTCVE