CVE-2025-29722

🛡️ CVE-2025-29722 – क्रॉस साइट रिक्वेस्ट फॉर्जरी CSRF Commercify v1.0 में द्वारा खोजा गया: David P.S Abraham उर्फ Davycipher CVE ID CVE-2025-29722 को MITRE Corporation द्वारा यह भेद्यता निर्धारित की गई है। सारांश एक CSRF भेद्यता की पहचान Commercify v1.0 में की गई, जो @yassmittal द्वारा विकसित एक...

CVE-2022-4140

CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...

CVE-2021-39475

CVE-2021-39475 एडमिन समीक्षा पृष्ठ पर XSS https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

ricerca-tesi

ricerca-tesi موارد بحث لـ cve-2026-7228 الأدوات تثبيت virtual-box تثبيت virtual-box: https://www.virtualbox.org/wiki/Downloads تثبيت iso لنظام windows 11 https://www.microsoft.com/it-it/software-download/windows11 تثبيت توزيعة linux: lubuntu https://lubuntu.me/downloads/ موقع الكود المصدري لـ...

WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Welcart e-Commerce versions = 2.12.3...

WordPress Verge3D Publishing and E-Commerce plugin < 4.13.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Raphael P. Cigana in WordPress Plugin Verge3D versions 4.13.1...

WordPress Welcart e-Commerce plugin <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by minhgalaxy in WordPress Plugin Welcart e-Commerce versions = 2.12.2...

CVE-2026-87091

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-87091 Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-91910

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-87091

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.12.2 . The root cause is insufficient input sanitization and output escaping regarding the 'rel' and 'option' parameters within the IPN endpoint. Because these para...

CVE-2026-87091 Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

PT-2026-104506

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce plugin for WordPress versions prior to 2.12.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. An attacker can inject arbitrary web scrip...

CVE-2026-87091: Improper Neutralization of Input During Web Page Generation

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-11795

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: before 5.03.01.54...

CVE-2026-11795 User Enumeration in Softtr's E-Commerce Pack

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: before 5.03.01.54...

EUVD-2026-91591

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: through 2026-10-02. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-11795

The Softtr Informatics Trading Limited Company E-Commerce Pack (affected through 2026-10-02) contains an observable discrepancy vulnerability (CWE-203) that facilitates Account Footprinting . This flaw allows for user enumeration or footprinting within the application. No specific root cause deta...

CVE-2026-11795: Observable Discrepancy

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: through 2026-10-02. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

PT-2026-104320

Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: through 2026-10-02. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...