WordPress Welcart E Commerce Vulnerabilities
Wordpress Welcart E-commerce vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Stored XSS Vulnerability in Welcart e-Commerce by Nanbu
CVE-2025-58984WordPressWelcart E-commerce5.9MEDIUMDeserialization Vulnerability in Nanbu Welcart e-Commerce Plugin
CVE-2025-54012WordPressWelcart E-commerce7.2HIGHStored XSS in Welcart e-Commerce by Nanbu
CVE-2025-54013WordPressWelcart E-commerce5.9MEDIUMPath Traversal Vulnerability in Welcart e-Commerce by Nanbu
CVE-2025-47511WordPressWelcart E-commerce6.5MEDIUMStored Cross-Site Scripting Vulnerability in Welcart e-Commerce Plugin for WordPress
CVE-2025-0511WordPressWelcart E-commerce6.1MEDIUMMissing Authorization Vulnerability Affects Welcart e-Commerce
CVE-2024-32144WordPressWelcart E-commerce4.3MEDIUMWordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection
CVE-2023-50847WordPressWelcart E-commerce7.2HIGHDirectory Traversal Vulnerability in Welcart e-Commerce Plugin for WordPress
CVE-2023-6120WordpressWelcart E-commerce2.7LOWWelcart e-Commerce < 2.9.5 - Reflected XSS
CVE-2023-5951WordpressWelcart E-commerce👾🟡6.1MEDIUMWelcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection
CVE-2023-5952WordpressWelcart e-Commerce👾🟡9.8CRITICALWelcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
CVE-2023-5953WordpressWelcart E-commerce👾🟡8.8HIGHAuthorization Bypass in Welcart e-Commerce Plugin for WordPress
CVE-2021-4375WordpressWelcart E-commerce4.3MEDIUMAuthorization Bypass Vulnerability in Welcart e-Commerce Plugin for WordPress
CVE-2021-4355WordpressWelcart E-commerce5.3MEDIUMWordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-22705WordPressWelcart e-Commerce6.1MEDIUMWelcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode
CVE-2022-4655WordpressWelcart E-commerce👾🟡5.4MEDIUMWelcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation
CVE-2022-4237WordpressWelcart E-commerce👾🟡8.8HIGHWelcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access
CVE-2022-4236WordpressWelcart E-commerce👾🟡6.5MEDIUMWelcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access
CVE-2022-4140WordpressWelcart E-commerce👾🟡EPSS 69%7.5HIGHWelcart e-Commerce < 2.8.4 - Subscriber+ Arbitrary Shipping Method Creation/Update/Deletion
CVE-2022-3946WordpressWelcart E-commerce👾🟡6.5MEDIUMWelcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site Scripting
CVE-2022-3935WordpressWelcart E-commerce👾🟡5.4MEDIUMWordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability
CVE-2022-41840WordPressWelcart E-commerce (Wo...EPSS 86%9.8CRITICALObject Injection Vulnerability in Collne Welcart e-Commerce Plugin for WordPress
CVE-2020-28339WordpressWelcart E-commerce8.8HIGHPHP Object Injection Vulnerability in Welcart e-Commerce Plugin for WordPress
CVE-2016-4825WordpressWelcart E-commerce5.6MEDIUMXSS Vulnerability in Welcart e-Commerce Plugin for WordPress
CVE-2016-4826WordpressWelcart E-commerce6.1MEDIUMCross-Site Scripting Vulnerability in Welcart e-Commerce Plugin by WordPress
CVE-2016-4827WordpressWelcart E-commerce6.1MEDIUM