| CVE-2026-111027 |
The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using…
|
6.8
Medium
|
Oct 28, 2026 |
| CVE-2026-111031 |
The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a…
|
4.7
Medium
|
Oct 28, 2026 |
| CVE-2026-111032 |
The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted…
|
3.8
Low
|
Oct 28, 2026 |
| CVE-2025-15671 |
The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and…
|
5.4
Medium
|
Aug 21, 2026 |
| CVE-2026-15213 |
The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store /…
|
5.3
Medium
|
Aug 12, 2026 |
| CVE-2026-16066 |
The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting…
|
5.4
Medium
|
Aug 12, 2026 |
| CVE-2026-16065 |
The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV…
|
6.5
Medium
|
Aug 6, 2026 |
| CVE-2023-5951 |
The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it…
|
6.1
Medium
|
Dec 4, 2023 |
| CVE-2023-5953 |
The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have…
|
8.8
High
|
Dec 4, 2023 |
| CVE-2023-5952 |
The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow…
|
Not rated
|
Dec 4, 2023 |
| CVE-2022-4655 |
The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes,…
|
5.4
Medium
|
Jan 16, 2023 |
| CVE-2022-4237 |
The Welcart e-Commerce WordPress plugin before 2.8.6 does not validate user input before using it in file_exist()…
|
8.8
High
|
Jan 2, 2023 |
| CVE-2022-4236 |
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the…
|
6.5
Medium
|
Jan 2, 2023 |
| CVE-2022-4140 |
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the…
|
7.5
High
|
Jan 2, 2023 |
| CVE-2022-3946 |
The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing…
|
6.5
Medium
|
Dec 12, 2022 |
| CVE-2022-3935 |
The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any…
|
5.4
Medium
|
Dec 12, 2022 |