| CVE-2026-111027 |
The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using…
|
6.8
Moyenne
|
28 oct. 2026 |
| CVE-2026-111031 |
The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a…
|
4.7
Moyenne
|
28 oct. 2026 |
| CVE-2026-111032 |
The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted…
|
3.8
Faible
|
28 oct. 2026 |
| CVE-2025-15671 |
The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and…
|
5.4
Moyenne
|
21 août 2026 |
| CVE-2026-15213 |
The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store /…
|
5.3
Moyenne
|
12 août 2026 |
| CVE-2026-16066 |
The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting…
|
5.4
Moyenne
|
12 août 2026 |
| CVE-2026-16065 |
The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV…
|
6.5
Moyenne
|
6 août 2026 |
| CVE-2023-5951 |
The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it…
|
6.1
Moyenne
|
4 déc. 2023 |
| CVE-2023-5953 |
The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have…
|
8.8
Élevée
|
4 déc. 2023 |
| CVE-2023-5952 |
The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow…
|
Non notée
|
4 déc. 2023 |
| CVE-2022-4655 |
The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes,…
|
5.4
Moyenne
|
16 janv. 2023 |
| CVE-2022-4237 |
The Welcart e-Commerce WordPress plugin before 2.8.6 does not validate user input before using it in file_exist()…
|
8.8
Élevée
|
2 janv. 2023 |
| CVE-2022-4236 |
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the…
|
6.5
Moyenne
|
2 janv. 2023 |
| CVE-2022-4140 |
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the…
|
7.5
Élevée
|
2 janv. 2023 |
| CVE-2022-3946 |
The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing…
|
6.5
Moyenne
|
12 déc. 2022 |
| CVE-2022-3935 |
The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any…
|
5.4
Moyenne
|
12 déc. 2022 |