CVE-2022-4140

CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...

CVE-2026-111032

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted product before processing SKU changes, because its capability check is not tied to the product being edited, allowing any authenticated user with Author-level access or higher to read...

CVE-2026-111031

The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect users to arbitrary external websites...

CVE-2026-111027

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the escaping it had applied before running the query, allowing users with the Editor role or higher to perform SQL injection attacks...

CVE-2026-111027

The Welcart e-Commerce WordPress plugin versions prior to 2.12.6 is vulnerable to SQL injection . The root cause is the failure to properly sanitize and escape a parameter before its use in a SQL query; specifically, the plugin strips previously applied escaping before execution. This flaw allows...

EUVD-2026-111716

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the escaping it had applied before running the query, allowing users with the Editor role or higher to perform SQL injection attacks...

WordPress Welcart e-Commerce plugin < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure vulnerability

Author+ Arbitrary Product SKU Update and Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin Welcart e-Commerce versions 2.12.6...

WordPress Welcart e-Commerce plugin < 2.12.6 - Editor+ SQLi vulnerability

Editor+ SQLi vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Welcart e-Commerce versions 2.12.6...

WordPress Welcart e-Commerce plugin < 2.12.6 - Unauthenticated Open Redirect vulnerability

Unauthenticated Open Redirect vulnerability discovered by Osman Hussein in WordPress Plugin Welcart e-Commerce versions 2.12.6...

CVE-2026-111032

The Welcart e-Commerce WordPress plugin (versions before 2.12.6 ) is vulnerable to an incorrect authorization flaw because capability checks are not tied to the specific product being edited. This allows any authenticated user with Author-level access or higher to read, modify, create, delete, an...

EUVD-2026-111717

The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect users to arbitrary external websites...

CVE-2026-111031

The Welcart e-Commerce WordPress plugin, in versions prior to 2.12.6 , is vulnerable to an unauthenticated open redirect . The flaw exists because the software fails to properly validate a user-supplied URL before utilizing it for a redirect, specifically via the 'usces_referer' parameter. This a...

EUVD-2026-111718

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted product before processing SKU changes, because its capability check is not tied to the product being edited, allowing any authenticated user with Author-level access or higher to read...

CVE-2026-111027 Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the escaping it had applied before running the query, allowing users with the Editor role or higher to perform SQL injection attacks...

CVE-2026-111032 Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted product before processing SKU changes, because its capability check is not tied to the product being edited, allowing any authenticated user with Author-level access or higher to read...

CVE-2026-111031 Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter

The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect users to arbitrary external websites...

PT-2026-127834

The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect users to arbitrary external websites...

PT-2026-127833

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the escaping it had applied before running the query, allowing users with the Editor role or higher to perform SQL injection attacks...

PT-2026-127835

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted product before processing SKU changes, because its capability check is not tied to the product being edited, allowing any authenticated user with Author-level access or higher to read...

CVE-2026-107752

The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wpuscesorderold JSON fields searchSql / searchSkuSql' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...