Nanbu vulnerabilities

Products

• Welcart E-commerce 53

Newest

• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter CVE-2026-119166 5.3 MediumOctober 31, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameter CVE-2026-118070 7.2 HighOctober 31, 2026
• nanbu welcart e-commerce Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax CVE-2026-111032 3.8 LowOctober 28, 2026
• nanbu welcart e-commerce Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter CVE-2026-111031 4.7 MediumOctober 28, 2026
• nanbu welcart e-commerce Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter CVE-2026-111027 6.8 MediumOctober 28, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie CVE-2026-107752 4.9 MediumOctober 17, 2026
• nanbu welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-96761 7.1 HighOctober 9, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters CVE-2026-87091 7.2 HighOctober 3, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback CVE-2026-19887 8.8 HighSeptember 5, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter CVE-2026-19914 7.2 HighSeptember 1, 2026
• nanbu welcart e-commerce Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter CVE-2025-15671 5.4 MediumAugust 21, 2026
• nanbu welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability CVE-2026-27539 7.1 HighAugust 13, 2026
• nanbu welcart e-commerce Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement Callback CVE-2026-15213 5.3 MediumAugust 12, 2026
• nanbu welcart e-commerce Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product Name CVE-2026-16066 5.4 MediumAugust 12, 2026
• nanbu welcart e-commerce Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import CVE-2026-16065 6.5 MediumAugust 6, 2026
• info@welcart welcart e-commerce WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability CVE-2026-49775 6.5 MediumJune 15, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure CVE-2025-12979 5.3 MediumNovember 13, 2025
• info@welcart welcart e-commerce WordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability CVE-2025-62953 4.3 MediumOctober 27, 2025
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail CVE-2025-10651 5.5 MediumOctober 22, 2025
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie CVE-2025-10649 6.5 MediumOctober 8, 2025
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2025-9367 5.5 MediumSeptember 10, 2025
• info@welcart welcart e-commerce WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58984 5.9 MediumSeptember 9, 2025
• info@welcart welcart e-commerce WordPress Welcart e-Commerce Plugin <= 2.11.16 - PHP Object Injection Vulnerability CVE-2025-54012 7.2 HighAugust 20, 2025
• info@welcart welcart e-commerce WordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54013 5.9 MediumJuly 16, 2025
• info@welcart welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerability CVE-2025-47511 6.8 MediumJune 9, 2025
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization... CVE-2025-27130 6.3 MediumApril 1, 2025
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter CVE-2025-0511 7.2 HighFebruary 12, 2025
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this... CVE-2024-45366 6.1 MediumSeptember 18, 2024
• collne welcart, nanbu welcart e-commerce, welcart e-commerce +2 more SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can... CVE-2024-42404 8.8 HighSeptember 18, 2024
• nanbu welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability CVE-2024-32144 5.4 MediumJune 11, 2024
• collne inc. welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection CVE-2023-50847 7.6 HighDecember 28, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal CVE-2023-6120 4.1 MediumDecember 9, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.9.5 - Reflected XSS CVE-2023-5951 6.1 MediumDecember 4, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload CVE-2023-5953 8.8 HighDecember 4, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection CVE-2023-5952 9.8 CriticalDecember 4, 2023
• collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to... CVE-2023-43614 6.1 MediumSeptember 26, 2023
• collne inc. welcart e-commerce, welcart e-commerce +1 more SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21... CVE-2023-43610 8.8 HighSeptember 26, 2023
• collne inc. welcart e-commerce, welcart e-commerce +1 more SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows... CVE-2023-43493 4.9 MediumSeptember 26, 2023
• collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21... CVE-2023-43484 6.1 MediumSeptember 26, 2023
• collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce... CVE-2023-41962 6.1 MediumSeptember 26, 2023
• collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce... CVE-2023-41233 6.1 MediumSeptember 26, 2023
• collne welcart, collne inc. welcart e-commerce +1 more Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with... CVE-2023-40532 4.3 MediumSeptember 26, 2023
• coline welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload... CVE-2023-40219 7.2 HighSeptember 26, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure CVE-2021-4375 4.3 MediumJune 7, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure CVE-2021-4355 7.5 HighJune 7, 2023
• collne inc. welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS) CVE-2023-22705 7.1 HighMarch 29, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode CVE-2022-4655 5.4 MediumJanuary 16, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation CVE-2022-4237 8.8 HighJanuary 2, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access CVE-2022-4236 6.5 MediumJanuary 2, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access CVE-2022-4140 Public exploit 7.5 HighJanuary 2, 2023
• Show olderLoading…