CVE-2025-10649

CVE-2025-10649 : Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via cookie in versions up to 2.11.21. Attack requires authenticated access at Author+ level and can lead to extraction of sensitive data due to insufficient escaping and weak query prep. Remediation per PT-202...