CVE-2025-52836

Incorrect Privilege Assignment vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP profitori allows Privilege Escalation.This issue affects The E-Commerce ERP: from n/a through = 2.1.1.3...

WordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by 63n0 in WordPress Plugin Welcart e-Commerce versions = 2.11.16...

CVE-2025-52836

CVE-2025-52836 is an active privilege-escalation vulnerability in WordPress The E-Commerce ERP by Unity Business Technology Pty Ltd. Affected versions are listed as n/a through 2.1.1.3. The issue enables privilege escalation (CVSSv3.1 base score 9.8, critical). Public details in connected sources...

CVE-2025-52836 WordPress The E-Commerce ERP <= 2.1.1.3 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP profitori allows Privilege Escalation.This issue affects The E-Commerce ERP: from n/a through = 2.1.1.3...

CVE-2025-52836 WordPress The E-Commerce ERP <= 2.1.1.3 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP allows Privilege Escalation. This issue affects The E-Commerce ERP: from n/a through 2.1.1.3...

CVE-2025-54013

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through = 2.11.16...

CVE-2025-54013 WordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through = 2.11.16...

CVE-2025-54013

CVE-2025-54013: Stored XSS in Welcart e-Commerce (WordPress) due to improper input neutralization during web page generation. Affected: Welcart e-Commerce up to version 2.11.16. Exploitation details not provided in the sources. Remediation: update to a version later than 2.11.16 (per patch inform...

WordPress plugin The E-Commerce ERP 安全漏洞

WordPress The E-Commerce ERP is a comprehensive management system designed for small and medium-sized enterprises, integrating financial management, human resources management, procurement management, sales management, inventory management and production management, helping enterprises to optimiz...

WordPress plugin Welcart e-Commerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-29746 · Nanbu · Nanbu Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: nanbu Welcart e-Commerce versions through 2.11.16 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. This can potentially lead to the...

PT-2025-29819 · Unity Business Technology Pty · The E-Commerce Erp

Name of the Vulnerable Software and Affected Versions: The E-Commerce ERP versions n/a through 2.1.1.3 Description: An incorrect privilege assignment issue exists in Unity Business Technology Pty Ltd The E-Commerce ERP, allowing privilege escalation. Recommendations: Update The E-Commerce ERP to ...

CVE-2025-52836: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP profitori allows Privilege Escalation.This issue affects The E-Commerce ERP: from n/a through = 2.1.1.3...

CVE-2025-54013: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through = 2.11.16...

Malicious code in @gdcorp-commerce/cx-page-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdcorp-commerce/cx-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28edf91ea21172ce7f3ff12d49071830bd423ed825a3b22b8e7228e1091cff42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @gdcorp-commerce/cx-event-tracker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @gdcorp-commerce/cx-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce80126682f56a0068ac541d5304235859cbf407b6945eee895e676fb186858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @gdcorp-commerce/cx-router

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...