Uscnanbu vulnerabilities

Products

• Welcart E-commerce 14

Newest

• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter CVE-2026-119166 5.3 MediumOctober 31, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameter CVE-2026-118070 7.2 HighOctober 31, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie CVE-2026-107752 4.9 MediumOctober 17, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters CVE-2026-87091 7.2 HighOctober 3, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback CVE-2026-19887 8.8 HighSeptember 5, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter CVE-2026-19914 7.2 HighSeptember 1, 2026
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure CVE-2025-12979 5.3 MediumNovember 13, 2025
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail CVE-2025-10651 5.5 MediumOctober 22, 2025
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie CVE-2025-10649 6.5 MediumOctober 8, 2025
• nanbu welcart e-commerce Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2025-9367 5.5 MediumSeptember 10, 2025
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter CVE-2025-0511 7.2 HighFebruary 12, 2025
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal CVE-2023-6120 4.1 MediumDecember 9, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure CVE-2021-4375 4.3 MediumJune 7, 2023
• nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure CVE-2021-4355 7.5 HighJune 7, 2023