3074 matches found
CVE-2026-16066
The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any visitor viewing the product page...
EUVD-2026-57086
The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any visitor viewing the product page...
WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by K. Sorrachat in WordPress Plugin Welcart e-Commerce versions = 2.11.31...
CVE-2026-16065
CVE-2026-16065 affects the Welcart e-Commerce WordPress plugin prior to 2.11.32. The issue is a lack of sanitisation of a value from an imported CSV file used in a SQL statement, enabling SQL injection by users with Editor role or higher (including custom shop-management roles). Reported CVSSv3.1...
CVE-2026-16065 Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import
The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement, allowing users with the Editor role and above including its custom shop-management roles to perform SQL injection attacks...
CVE-2026-5219
Cross-Site request forgery CSRF vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49...
CVE-2026-12722
Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass. This issue affects FTC E-Commerce Management Panel: before 1.0.2...
CVE-2026-5219
Cross-Site request forgery CSRF vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49...
CVE-2026-5219
CVE-2026-5219 is a CSRF vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack affecting versions up to 30072026. The issue allows an attacker to perform unauthorized actions with network access (attack vector: network) and requires user interaction, with CVSS 3.1 base scor...
CVE-2026-5219 CSRF in Softtr's E-Commerce Pack
Cross-Site request forgery CSRF vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49...
EUVD-2026-51126
Cross-Site request forgery CSRF vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: through 30072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-12722 Authentication Bypass in FTC Software's E-Commerce Management Panel
Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass. This issue affects FTC E-Commerce Management Panel: before 1.0.2...
CVE-2026-12722
The CVE-2026-12722 entry concerns FTC Software’s E-Commerce Management Panel. Affected product: FTC E-Commerce Management Panel (FTC Software IT Services). Vulnerability: missing authentication for a critical function that enables an authentication bypass. Scope: impact is evidenced by the CVSS 3...
CVE-2026-12722 Authentication Bypass in FTC Software's E-Commerce Management Panel
Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass. This issue affects FTC E-Commerce Management Panel: before 1.0.2...
EUVD-2026-51109
Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass. This issue affects FTC E-Commerce Management Panel: before 1.0.2...
PT-2026-66470
Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass. This issue affects FTC E-Commerce Management Panel: before 1.0.2...
PT-2026-66472
Name of the Vulnerable Software and Affected Versions E-Commerce Pack versions prior to 5.03.01.49 Description A Cross-Site Request Forgery CSRF flaw exists in the software. CSRF is a type of attack that tricks a victim into submitting a malicious request. It allows an attacker to perform...
CVE-2026-7488
CVE-2026-7488 describes an alleged vulnerability in IKAS Technologies' E-Commerce system related to insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Affected scope is stated as “E-Commerce: through 03062026,” with the CVSS 3.1 base score of 7.5 (HI...
CVE-2026-7488
Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026...