Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access

CVE-2022-4140

Summary

The Welcart e-Commerce plugin for WordPress, prior to version 2.8.5, contains a vulnerability that arises from insufficient validation of user input. This oversight allows an unauthenticated attacker to potentially read arbitrary files on the server. By manipulating the input, the attacker can gain access to sensitive information that should otherwise be secured, highlighting the importance of input validation in web applications.

References