CVE-2026-16065

The CVE-2026-16065 affects the Welcart e-Commerce WordPress plugin up to version 2.11.31. Affected component: the CSV import workflow; root cause: unsanitized value from an imported CSV being used in a SQL statement, enabling SQL injection by users with Editor role or higher. Impact: potential da...