Welcart e-Commerce

Güvenlik açıkları

• CVE-2022-41840kimlik doğrulamasız≤ 2.7.7

  WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability

  Kritik 9.8

• CVE-2026-19887kimlik doğrulamasız · tıklama gerekir≤ 2.12.1

  Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback

  Yüksek 8.8

• CVE-2020-28339giriş gerekir

  The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usces_unserialize.

  Yüksek 8.8

• CVE-2026-19914kimlik doğrulamasız≤ 2.12.1

  Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter

  Yüksek 7.2

• CVE-2025-54012yüksek yetki≤ 2.11.16

  WordPress Welcart e-Commerce Plugin <= 2.11.16 - PHP Object Injection Vulnerability

  Yüksek 7.2

• CVE-2023-50847yüksek yetki≤ 2.9.3

  WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection

  Yüksek 7.2

• CVE-2026-27539kimlik doğrulamasız · tıklama gerekir≤ 2.11.31

  WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-49775kimlik doğrulamasız≤ 2.11.28

  WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2025-10649yazar+≤ 2.11.21

  Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie

  Orta 6.5

• CVE-2025-47511yüksek yetki≤ 2.11.13

  WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerability

  Orta 6.5

• CVE-2025-0511kimlik doğrulamasız≤ 2.11.9

  Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter

  Orta 6.1

• CVE-2023-22705kimlik doğrulamasız · tıklama gerekir≤ 2.8.10

  WordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2025-58984yüksek yetki≤ 2.11.20

  WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability

  Orta 5.9

• CVE-2025-54013yüksek yetki≤ 2.11.16

  WordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability

  Orta 5.9

• CVE-2025-10651editör+≤ 2.11.22

  Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail

  Orta 5.5

• CVE-2025-9367editör+≤ 2.11.20

  Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting

  Orta 5.5

• CVE-2025-12979kimlik doğrulamasız≤ 2.11.24

  Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure

  Orta 5.3

• CVE-2025-62953giriş gerekir≤ 2.11.24

  WordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2024-32144giriş gerekir≤ 2.9.14

  WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2023-6120yönetici≤ 2.9.6

  Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal

  Düşük 2.7