Welcart E-commerce Security Vulnerabilities and Issues — Welcart E-commerce CVE List

Lucene search

WelcartWelcart E-commerce

4 matches found

CVE•added 2023/12/09 7:15 a.m.•51 views

CVE-2023-6120

The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_certificate_file function. This makes it possible for administrators to upload .pem or .crt files to arbitrary locations on the server.

4.1CVSS4.3AI score0.00125EPSS

CVE•added 2023/06/07 2:15 a.m.•34 views

CVE-2021-4375

The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the usces_download_system_information() function in versions up to, and including, 2.2.7. This makes it possible for authenticated attackers to download information including WordP...

4.3CVSS4.3AI score0.00065EPSS

CVE•added 2015/07/24 4:59 p.m.•32 views

CVE-2015-2973

Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to (1) classes/usceshop.class.php, (2) includes/edit-form-advanced.php, (3) includes/edit-form-advanced...

4.3CVSS6AI score0.00435EPSS

CVE•added 2023/09/27 3:19 p.m.•32 views

CVE-2023-43493

SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information.

4.9CVSS5.3AI score0.00393EPSS