Skip to content

Welcart vulnerabilities

Products

Newest

welcart e-commerce plugin Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scripting CVE-2026-120597 5.3 MediumNovember 2, 2026
nanbu welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-96761 7.1 HighOctober 9, 2026
nanbu welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability CVE-2026-27539 7.1 HighAugust 13, 2026
info@welcart welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerability CVE-2025-47511 6.8 MediumJune 9, 2025
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization... CVE-2025-27130 6.3 MediumApril 1, 2025
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter CVE-2025-0511 7.2 HighFebruary 12, 2025
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this... CVE-2024-45366 6.1 MediumSeptember 18, 2024
collne welcart, nanbu welcart e-commerce, welcart e-commerce +2 more SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can... CVE-2024-42404 8.8 HighSeptember 18, 2024
nanbu welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability CVE-2024-32144 5.4 MediumJune 11, 2024
collne inc. welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection CVE-2023-50847 7.6 HighDecember 28, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal CVE-2023-6120 4.1 MediumDecember 9, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.9.5 - Reflected XSS CVE-2023-5951 6.1 MediumDecember 4, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload CVE-2023-5953 8.8 HighDecember 4, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection CVE-2023-5952 9.8 CriticalDecember 4, 2023
collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to... CVE-2023-43614 6.1 MediumSeptember 26, 2023
collne inc. welcart e-commerce, welcart e-commerce +1 more SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21... CVE-2023-43610 8.8 HighSeptember 26, 2023
collne inc. welcart e-commerce, welcart e-commerce +1 more SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows... CVE-2023-43493 4.9 MediumSeptember 26, 2023
collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21... CVE-2023-43484 6.1 MediumSeptember 26, 2023
collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce... CVE-2023-41962 6.1 MediumSeptember 26, 2023
collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce... CVE-2023-41233 6.1 MediumSeptember 26, 2023
coline welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload... CVE-2023-40219 7.2 HighSeptember 26, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure CVE-2021-4375 4.3 MediumJune 7, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure CVE-2021-4355 7.5 HighJune 7, 2023
collne inc. welcart e-commerce, welcart e-commerce +1 more WordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS) CVE-2023-22705 7.1 HighMarch 29, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode CVE-2022-4655 5.4 MediumJanuary 16, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation CVE-2022-4237 8.8 HighJanuary 2, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access CVE-2022-4236 6.5 MediumJanuary 2, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access CVE-2022-4140 Public exploit 7.5 HighJanuary 2, 2023
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.4 - Subscriber+ Arbitrary Shipping Method Creation/Update/Deletion CVE-2022-3946 6.5 MediumDecember 12, 2022
nanbu welcart e-commerce, welcart e-commerce +1 more Welcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site Scripting CVE-2022-3935 5.4 MediumDecember 12, 2022
collne inc. welcart e-commerce (wordpress plugin), welcart e-commerce +1 more WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability CVE-2022-41840 Public exploit 7.5 HighNovember 18, 2022
collne inc. welcart e-commerce, welcart e-commerce +1 more Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote... CVE-2021-20734 6.1 MediumJune 22, 2021
welcart e-commerce The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object... CVE-2020-28339 7.5 HighNovember 7, 2020
welcart e-commerce The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows... CVE-2016-4828 6.5 MediumJune 25, 2016
welcart e-commerce Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for... CVE-2016-4827 6.1 MediumJune 25, 2016
welcart e-commerce Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for... CVE-2016-4826 6.1 MediumJune 25, 2016
welcart e-commerce The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to... CVE-2016-4825 5.6 MediumJune 25, 2016
welcart e-commerce Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for... CVE-2015-7791 6.3 MediumDecember 29, 2015
welcart e-commerce Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for... CVE-2015-2973 4.3 MediumJuly 24, 2015
welcart e-commerce Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress... CVE-2014-10017 7.5 HighJanuary 13, 2015
welcart e-commerce Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for... CVE-2014-10016 4.3 MediumJanuary 13, 2015
welcart plugin Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress... CVE-2012-5178 6.8 MediumDecember 19, 2012
welcart plugin Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows... CVE-2012-5177 4.3 MediumDecember 19, 2012