Vulners
Lucene search
2 matches found
CVE-2025-10651
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ordermail' setting in versions up to, and including, 2.11.22. This is due to insufficient sanitization on the ordermail field and a lack of escaping on output. This makes it possible for authenticate...
5.5CVSS5AI score0.00028EPSS
Exploits0References1
CVE-2025-10651
CVE-2025-10651: Welcart e-Commerce (WordPress)
5.5CVSS4.7AI score0.00028EPSS
Exploits0References3
20