CVE-2025-27130

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product...

CVE-2025-27130

creationtimestamp| type| source ---|---|--- 2025-04-01 09:32:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9869 2025-04-01 13:37:51+00:00| seen| https://t.me/cvedetector/21745 2025-04-06 02:03:30+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lm4e5dljgc2x...

CVE-2025-27130

Welcart e-Commerce is a WordPress plugin. The CVE-2025-27130 entry concerns an untrusted data deserialization vulnerability in Welcart e-Commerce versions 2.11.6 and earlier, enabling a remote unauthenticated attacker to execute arbitrary code on websites using the product. The root cause is tied...

CVE-2025-27130

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product...