Skip to contentWelcart E-commerce vulnerabilities
- info@welcart welcart e-commerce, welcart e-commerce +1 moreWordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion VulnerabilityCVE-2025-475116.8 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization...CVE-2025-271306.3 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name ParameterCVE-2025-05117.2 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this...CVE-2024-453666.1 Medium
- collne welcart, nanbu welcart e-commerce, welcart e-commerce +2 moreSQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can...CVE-2024-424048.8 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerabilityCVE-2024-321445.4 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreWordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL InjectionCVE-2023-508477.6 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory TraversalCVE-2023-61204.1 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.9.5 - Reflected XSSCVE-2023-59516.1 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File UploadCVE-2023-59538.8 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.9.5 - Unauthenticated PHP Object InjectionCVE-2023-59529.8 Critical
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to...CVE-2023-436146.1 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreSQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21...CVE-2023-436108.8 High
- collne inc. welcart e-commerce, welcart e-commerce +1 moreSQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows...CVE-2023-434934.9 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21...CVE-2023-434846.1 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce...CVE-2023-419626.1 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce...CVE-2023-412336.1 Medium
- coline welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload...CVE-2023-402197.2 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information DisclosureCVE-2021-43754.3 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information DisclosureCVE-2021-43557.5 High
- collne inc. welcart e-commerce, welcart e-commerce +1 moreWordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)CVE-2023-227057.1 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via ShortcodeCVE-2022-46555.4 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.8.6 - Subscriber+ PHAR DeserialisationCVE-2022-42378.8 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File AccessCVE-2022-42366.5 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File AccessCVE-2022-4140Public exploit7.5 High
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.8.4 - Subscriber+ Arbitrary Shipping Method Creation/Update/DeletionCVE-2022-39466.5 Medium
- nanbu welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site ScriptingCVE-2022-39355.4 Medium
- collne inc. welcart e-commerce (wordpress plugin), welcart e-commerce +1 moreWordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerabilityCVE-2022-41840Public exploit7.5 High
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote...CVE-2021-207346.1 Medium
- welcart e-commerceThe usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object...CVE-2020-283397.5 High
- welcart e-commerceThe Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows...CVE-2016-48286.5 Medium
- welcart e-commerceCross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for...CVE-2016-48276.1 Medium
- welcart e-commerceCross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for...CVE-2016-48266.1 Medium
- welcart e-commerceThe Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to...CVE-2016-48255.6 Medium
- welcart e-commerceMultiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for...CVE-2015-77916.3 Medium
- welcart e-commerceMultiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for...CVE-2015-29734.3 Medium