Vulnerabilities and security researches forusc-e-shop usc-e-shop

Direction: ascending

Jun 07, 2024

Welcart e-Commerce # CVE-2020-28339

CVE, Research URL: CVE-2020-28339
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 08, 2020
Research Description: The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usces_unserialize. There is not a complete POP chain.
Affected versions: max 1.9.36.
Status: vulnerable

Welcart e-Commerce # CVE-2012-5177

CVE, Research URL: CVE-2012-5177
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 19, 2012
Research Description: Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected versions: max 1.2.2.
Status: vulnerable

Welcart e-Commerce # CVE-2015-7791

CVE, Research URL: CVE-2015-7791
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 30, 2015
Research Description: Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) search[column] or (2) switch parameter.
Affected versions: max 1.5.3.
Status: vulnerable

Welcart e-Commerce # CVE-2016-4825

CVE, Research URL: CVE-2016-4825
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 26, 2016
Research Description: The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted serialized data.
Affected versions: max 1.8.3.
Status: vulnerable

Welcart e-Commerce # CVE-2016-4826

CVE, Research URL: CVE-2016-4826
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 26, 2016
Research Description: Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4827.
Affected versions: max 1.8.3.
Status: vulnerable

Welcart e-Commerce # CVE-2016-4828

CVE, Research URL: CVE-2016-4828
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 26, 2016
Research Description: The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.
Affected versions: max 1.8.3.
Status: vulnerable

Welcart e-Commerce # CVE-2016-4827

CVE, Research URL: CVE-2016-4827
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 26, 2016
Research Description: Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826.
Affected versions: max 1.8.3.
Status: vulnerable

Welcart e-Commerce # CVE-2022-3935

CVE, Research URL: CVE-2022-3935
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 12, 2022
Research Description: The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks
Affected versions: max 2.8.4.
Status: vulnerable

Welcart e-Commerce # CVE-2015-2973

CVE, Research URL: CVE-2015-2973
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jul 24, 2015
Research Description: Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to (1) classes/usceshop.class.php, (2) includes/edit-form-advanced.php, (3) includes/edit-form-advanced30.php, (4) includes/edit-form-advanced34.php, (5) includes/member_edit_form.php, (6) includes/order_edit_form.php, (7) includes/order_list.php, or (8) includes/usces_item_master_list.php, related to admin.php.
Affected versions: max 1.4.18.
Status: vulnerable

Welcart e-Commerce # CVE-2022-4237

CVE, Research URL: CVE-2022-4237
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jan 03, 2023
Research Description: The Welcart e-Commerce WordPress plugin before 2.8.6 does not validate user input before using it in file_exist() functions via various AJAX actions available to any authenticated users, which could allow users with a role as low as subscriber to perform PHAR deserialisation when they can upload a file and a suitable gadget chain is present on the blog
Affected versions: max 2.8.6.
Status: vulnerable

Welcart e-Commerce # CVE-2014-10016

CVE, Research URL: CVE-2014-10016
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jan 13, 2015
Research Description: Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) unspecified vectors related to purchase_limit or the (2) name, (3) intl, (4) nocod, or (5) time parameter in an add_delivery_method action to wp-admin/admin-ajax.php.
Affected versions: max 1.5.
Status: vulnerable

Welcart e-Commerce # CVE-2022-3946

CVE, Research URL: CVE-2022-3946
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 12, 2022
Research Description: The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing any logged-in user to create, update and delete shipping methods.
Affected versions: max 2.8.4.
Status: vulnerable

Welcart e-Commerce # CVE-2022-4140

CVE, Research URL: CVE-2022-4140
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jan 03, 2023
Research Description: The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server
Affected versions: max 2.8.5.
Status: vulnerable

Welcart e-Commerce # CVE-2014-10017

CVE, Research URL: CVE-2014-10017
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jan 13, 2015
Research Description: Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in the usces_itemedit page to wp-admin/admin.php.
Affected versions: max 1.5.
Status: vulnerable

Welcart e-Commerce # CVE-2012-5178

CVE, Research URL: CVE-2012-5178
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 19, 2012
Research Description: Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase.
Affected versions: max 1.2.2.
Status: vulnerable

Welcart e-Commerce # CVE-2022-41840

CVE, Research URL: CVE-2022-41840
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 19, 2022
Research Description: Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.
Affected versions: max 2.7.8.
Status: vulnerable

Welcart e-Commerce # CVE-2022-4236

CVE, Research URL: CVE-2022-4236
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jan 03, 2023
Research Description: The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server.
Affected versions: max 2.8.5.
Status: vulnerable

Welcart e-Commerce # CVE-2021-4355

CVE, Research URL: CVE-2021-4355
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 07, 2023
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the download_orderdetail_list(), change_orderlist(), and download_member_list() functions called via admin_init hooks in versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to download lists of members, products and orders.
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # CVE-2022-4655

CVE, Research URL: CVE-2022-4655
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jan 16, 2023
Research Description: The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, which could allow users with a role as low as a contributor to perform a Stored Cross-Site Scripting attack.
Affected versions: max 2.8.9.
Status: vulnerable

Welcart e-Commerce # CVE-2023-22705

CVE, Research URL: CVE-2023-22705
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Mar 30, 2023
Research Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions.
Affected versions: max 2.8.10.
Status: vulnerable

Welcart e-Commerce # CVE-2021-4375

CVE, Research URL: CVE-2021-4375
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 07, 2023
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the usces_download_system_information() function in versions up to, and including, 2.2.7. This makes it possible for authenticated attackers to download information including WordPress settings, plugin settings, PHP settings and server settings.
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # CVE-2023-6120

CVE, Research URL: CVE-2023-6120
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 09, 2023
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_certificate_file function. This makes it possible for administrators to upload .pem or .crt files to arbitrary locations on the server.
Affected versions: max 2.9.7.
Status: vulnerable

Welcart e-Commerce # CVE-2023-50847

CVE, Research URL: CVE-2023-50847
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 29, 2023
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.3.
Affected versions: max 2.9.4.
Status: vulnerable

Welcart e-Commerce # CVE-2024-32144

CVE, Research URL: CVE-2024-32144
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 11, 2024
Research Description: Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.
Affected versions: max 2.10.0.
Status: vulnerable

Welcart e-Commerce # CVE-2023-40219

CVE, Research URL: CVE-2023-40219
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 27, 2023
Research Description: Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.
Affected versions: Min 2.7, max 2.8.21.
Status: vulnerable

Welcart e-Commerce # CVE-2023-5952

CVE, Research URL: CVE-2023-5952
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 05, 2023
Research Description: The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Injection when a suitable gadget is present on the blog
Affected versions: max 2.9.5.
Status: vulnerable

Welcart e-Commerce # CVE-2023-5951

CVE, Research URL: CVE-2023-5951
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 05, 2023
Research Description: The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected versions: max 2.9.5.
Status: vulnerable

Welcart e-Commerce # CVE-2023-5953

CVE, Research URL: CVE-2023-5953
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Dec 05, 2023
Research Description: The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server
Affected versions: max 2.9.5.
Status: vulnerable

Jun 10, 2024

Welcart e-Commerce # CVE-2023-43493

CVE, Research URL: CVE-2023-43493
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via multiple parameters in the 'get_logs' functionality in versions up to, and including, 2.8.21 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with user level 5 or higher (which corresponds roughly to Author-level capabilities) to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 2.8.22.
Status: vulnerable

Welcart e-Commerce # CVE-2021-20734

CVE, Research URL: CVE-2021-20734
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 22, 2021
Research Description: Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Affected versions: max 2.2.4.
Status: vulnerable

Welcart e-Commerce # CVE-2023-43610

CVE, Research URL: CVE-2023-43610
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the order data edit page in versions up to, and including, 2.8.21 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 2.8.22.
Status: vulnerable

Sep 23, 2024

Welcart e-Commerce # CVE-2024-45366

CVE, Research URL: CVE-2024-45366
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 18, 2024
Research Description: Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.
Affected versions: max 2.11.2.
Status: vulnerable

Welcart e-Commerce # CVE-2024-42404

CVE, Research URL: CVE-2024-42404
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 18, 2024
Research Description: SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.
Affected versions: max 2.11.2.
Status: vulnerable

Feb 13, 2025

Welcart e-Commerce # CVE-2025-0511

CVE, Research URL: CVE-2025-0511
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Feb 12, 2025
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 2.11.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 2.11.10.
Status: vulnerable

Jul 19, 2025

Welcart e-Commerce # CVE-2025-54013

CVE, Research URL: CVE-2025-54013
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jul 16, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.
Affected versions: max 2.11.17.
Status: vulnerable

Aug 22, 2025

Welcart e-Commerce # CVE-2025-54012

CVE, Research URL: CVE-2025-54012
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 20, 2025
Research Description: Deserialization of Untrusted Data vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Object Injection.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.
Affected versions: max 2.11.17.
Status: vulnerable

Sep 10, 2025

Welcart e-Commerce # CVE-2025-58984

CVE, Research URL: CVE-2025-58984
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 09, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.20.
Affected versions: max 2.11.21.
Status: vulnerable

Nov 10, 2025

Welcart e-Commerce # CVE-2025-62953

CVE, Research URL: CVE-2025-62953
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Oct 27, 2025
Research Description: Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24.
Affected versions: max 2.11.25.
Status: vulnerable

Welcart e-Commerce # CVE-2025-10651

CVE, Research URL: CVE-2025-10651
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Oct 22, 2025
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'order_mail' setting in versions up to, and including, 2.11.22. This is due to insufficient sanitization on the order_mail field and a lack of escaping on output. This makes it possible for authenticated attackers, with Editor-level permissions and above, to inject arbitrary web scripts via the General Setting page that will execute when an administrator accesses the E-mail Setting page.
Affected versions: max 2.11.23.
Status: vulnerable

Welcart e-Commerce # CVE-2025-10649

CVE, Research URL: CVE-2025-10649
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Oct 08, 2025
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient escaping on the user supplied value and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 2.11.22.
Status: vulnerable

Dec 10, 2025

Welcart e-Commerce # CVE-2025-12979

CVE, Research URL: CVE-2025-12979
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 13, 2025
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'usces_export' action in all versions up to, and including, 2.11.24. This makes it possible for unauthenticated attackers to access configured payment credentials (ex. PayPal api secret) , as well as business contact details, mail templates, and other operational settings tied to the store.
Affected versions: max 2.11.25.
Status: vulnerable

Apr 24, 2026

Welcart e-Commerce # CVE-2025-9367

CVE, Research URL: CVE-2025-9367
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 10, 2025
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 2.11.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Affected versions: max 2.11.21.
Status: vulnerable

Jun 10, 2026

Welcart e-Commerce # CVE-2026-49775

CVE, Research URL: CVE-2026-49775
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 16, 2026
Research Description: Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.
Affected versions: max 2.11.29.
Status: vulnerable

Jun 14, 2026

Welcart e-Commerce # CVE-2025-27130

CVE, Research URL: CVE-2025-27130
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Apr 01, 2025
Research Description: Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.
Affected versions: max 2.11.6.
Status: vulnerable

Welcart e-Commerce # CVE-2025-47511

CVE, Research URL: CVE-2025-47511
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jun 09, 2025
Research Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affects Welcart e-Commerce: from n/a through <= 2.11.13.
Affected versions: max 2.11.14.
Status: vulnerable

Jun 16, 2026

Welcart e-Commerce # 0194a33bf4703c6ab5de5cc5bcd51498ba485794

CVE, Research URL: 0194a33bf4703c6ab5de5cc5bcd51498ba485794
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Jul 25, 2015
Research Description: Welcart e-Commerce [usc-e-shop] < 1.1 WordPress Welcart E-Commerce Plugin - Multiple Vulnerabilities This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Update the plugin.
Affected versions: max 1.1.
Status: vulnerable

Welcart e-Commerce # 12e54dcb1bdeebb0c09a271c9826f1ffb8b313e1

CVE, Research URL: 12e54dcb1bdeebb0c09a271c9826f1ffb8b313e1
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 16, 2022
Research Description: Welcart e-Commerce [usc-e-shop] < 2.8.4 Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery The Welcart e-Commerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.3. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to invoke them and execute actions on behalf of administrators, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 2.8.4.
Status: vulnerable

Welcart e-Commerce # 30b5a8f4768e60a8ef90dfbad248b9bd8abd285b

CVE, Research URL: 30b5a8f4768e60a8ef90dfbad248b9bd8abd285b
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 06, 2021
Research Description: Welcart e-Commerce [usc-e-shop] < 2.2.8 WordPress Welcart e-Commerce plugin <= 2.2.7 - Authenticated System Information Disclosure vulnerability Authenticated System Information Disclosure vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Welcart e-Commerce plugin (versions <= 2.2.7).
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # e0163b6a84944d8b86e4a2886211aed0809dd651

CVE, Research URL: e0163b6a84944d8b86e4a2886211aed0809dd651
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 28, 2022
Research Description: Welcart e-Commerce [usc-e-shop] < 2.8.4 Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery The Welcart e-Commerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.3. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 2.8.4.
Status: vulnerable

Welcart e-Commerce # af16747919cf14f2f54cd5acc985faecc3eb3905

CVE, Research URL: af16747919cf14f2f54cd5acc985faecc3eb3905
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 06, 2021
Research Description: Welcart e-Commerce [usc-e-shop] < 2.2.8 WordPress Welcart e-Commerce plugin <= 2.2.7 - Unauthenticated Information Disclosure vulnerability Unauthenticated Information Disclosure vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Welcart e-Commerce plugin (versions <= 2.2.7).
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # 05dec5fcca0e9fcda639cce7b70d4b9bef921966

CVE, Research URL: 05dec5fcca0e9fcda639cce7b70d4b9bef921966
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Feb 09, 2021
Research Description: Welcart e-Commerce [usc-e-shop] < 2.0.1 WordPress Welcart e-Commerce plugin <= 2.0.0 - SQL injection (SQLi) vulnerability SQL injection (SQLi) vulnerability found by Erik David Martin in WordPress Welcart e-Commerce plugin (versions <= 2.0.0).
Affected versions: max 2.0.1.
Status: vulnerable

Welcart e-Commerce # 4189c7265f663f4e26346be3f437477a768af0f6

CVE, Research URL: 4189c7265f663f4e26346be3f437477a768af0f6
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 06, 2021
Research Description: Welcart e-Commerce [usc-e-shop] < 2.2.8 Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the download_orderdetail_list(), change_orderlist(), and download_member_list() functions called via admin_init hooks in versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to download lists of members, products and orders.
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # d4622a3e-3b1f-448b-90aa-47e50ab73893

CVE, Research URL: d4622a3e-3b1f-448b-90aa-47e50ab73893
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: Welcart e-Commerce [usc-e-shop] < 1.5 Welcart e-Commerce 1.3.12 - DOM Cross-Site Scripting (XSS) The Welcart e-Commerce WordPress plugin was affected by a DOM Cross-Site Scripting (XSS) security vulnerability.
Affected versions: max 1.5.
Status: vulnerable

Welcart e-Commerce # e3e10462df2dd8133883fd22641b9a12ca77d196

CVE, Research URL: e3e10462df2dd8133883fd22641b9a12ca77d196
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 06, 2021
Research Description: Welcart e-Commerce [usc-e-shop] < 2.2.8 Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the usces_download_system_information() function in versions up to, and including, 2.2.7. This makes it possible for authenticated attackers to download information including WordPress settings, plugin settings, PHP settings and server settings.
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # 4941bd82ab33e5b59ab39520e28c80904486c9f9

CVE, Research URL: 4941bd82ab33e5b59ab39520e28c80904486c9f9
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Feb 08, 2021
Research Description: Welcart e-Commerce [usc-e-shop] < 2.1.1 Welcart e-Commerce <= 2.1.0 - SQL Injection The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the 'search[order_column][0]' POST parameter in versions up to, and including, 2.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 2.1.1.
Status: vulnerable

Welcart e-Commerce # 65e643c4-f55e-47bf-8ba3-136c54aff1b2

CVE, Research URL: 65e643c4-f55e-47bf-8ba3-136c54aff1b2
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: Welcart e-Commerce [usc-e-shop] < 2.1.1 Welcart e-Commerce < 2.1.1 - Authenticated SQL Injection The Welcart e-Commerce WordPress plugin, less than version 2.1.1 and possibly below, was vulnerable to authenticated SQLI Injection in the search[order_column][0] POST parameter of the "/wp-admin/admin.php?page=usces_orderlist" page.
Affected versions: max 2.1.1.
Status: vulnerable

Welcart e-Commerce # 7ceab4db-b543-4ab2-8e6f-095f00479ee5

CVE, Research URL: 7ceab4db-b543-4ab2-8e6f-095f00479ee5
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: Welcart e-Commerce [usc-e-shop] < 1.8.3 wpscan.com
Affected versions: max 1.8.3.
Status: vulnerable

Welcart e-Commerce # ecaf1932-2b16-4303-8c21-cb70aeabbfdc

CVE, Research URL: ecaf1932-2b16-4303-8c21-cb70aeabbfdc
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: Welcart e-Commerce [usc-e-shop] < 2.2.8 Welcart e-Commerce < 2.2.8 - Authenticated System Information Disclosure The usces_download_system_information AJAX action of the plugin did not have capability check in place, allowing any authenticated user (such as subscriber) to can export data including WordPress settings, theme and plugins (active/inactive) along with their version, Welcart general settings and payment method etc, as well as the server and PHP settings
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # 7c4b4120c916baf6adbfadc2bf4fd7866e19da33

CVE, Research URL: 7c4b4120c916baf6adbfadc2bf4fd7866e19da33
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 15, 2023
Research Description: Welcart e-Commerce [usc-e-shop] < 2.8.22 WordPress Welcart e-Commerce Plugin < 2.8.22 is vulnerable to SQL Injection Update the WordPress Welcart e-Commerce plugin to the latest available version (at least 2.8.22). Unknown discovered and reported this SQL Injection vulnerability in WordPress Welcart e-Commerce Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information. This vulnerability has been fixed in version 2.8.22.
Affected versions: max 2.8.22.
Status: vulnerable

Welcart e-Commerce # 419c0c6b89d1e02325f1e471a1d4e8e397d273a6

CVE, Research URL: 419c0c6b89d1e02325f1e471a1d4e8e397d273a6
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 14, 2023
Research Description: Welcart e-Commerce [usc-e-shop] < 2.9.5 Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery The Welcart e-Commerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.4. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to upload files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Since uploaded files were not verified properly, this could lead to arbitrary file upload.
Affected versions: max 2.9.5.
Status: vulnerable

Welcart e-Commerce # 1cb06be3-b3c2-4053-a0a0-5dc0476ee81c

CVE, Research URL: 1cb06be3-b3c2-4053-a0a0-5dc0476ee81c
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: Welcart e-Commerce [usc-e-shop] < 2.2.8 Welcart e-Commerce < 2.2.8 - Unauthenticated Information Disclosure The plugin did not have proper capability check in some of its functions, which could allow unauthenticated users to download the list of members, products and orders in CSV format
Affected versions: max 2.2.8.
Status: vulnerable

Welcart e-Commerce # 30c523df55bb0d03ec414b298e56a456735e2348

CVE, Research URL: 30c523df55bb0d03ec414b298e56a456735e2348
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 14, 2023
Research Description: Welcart e-Commerce [usc-e-shop] < 2.8.22 Welcart e-Commerce <= 2.8.21 - Authenticated(level_5+) SQL Injection via get_logs The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via multiple parameters in the 'get_logs' functionality in versions up to, and including, 2.8.21 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with user level 5 or higher (which corresponds roughly to Author-level capabilities) to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 2.8.22.
Status: vulnerable

Welcart e-Commerce # d099ab511b85fb4329d1dda5d0149839e3687185

CVE, Research URL: d099ab511b85fb4329d1dda5d0149839e3687185
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 15, 2023
Research Description: Welcart e-Commerce [usc-e-shop] < 2.9.6 WordPress Welcart e-Commerce Plugin < 2.9.6 is vulnerable to PHP Object Injection Update the WordPress Welcart e-Commerce plugin to the latest available version (at least 2.9.6). WordFence discovered and reported this PHP Object Injection vulnerability in WordPress Welcart e-Commerce Plugin. This could allow a malicious actor to execute code injection, SQL injection, path traversal, denial of service, and more if a proper POP chain is present. This vulnerability has been fixed in version 2.9.6.
Affected versions: max 2.9.6.
Status: vulnerable

Welcart e-Commerce # 57720a7490e3e8957f19219a0fa8a75666525ee2

CVE, Research URL: 57720a7490e3e8957f19219a0fa8a75666525ee2
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 14, 2023
Research Description: Welcart e-Commerce [usc-e-shop] < 2.9.5 Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload The Welcart e-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_certificate_file function in all versions up to, and including, 2.9.4. This makes it possible for subscribers or higher to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected versions: max 2.9.5.
Status: vulnerable

Welcart e-Commerce # 87d99d4485bb686d23bf4cc14a7a45c46e85a6bc

CVE, Research URL: 87d99d4485bb686d23bf4cc14a7a45c46e85a6bc
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 15, 2023
Research Description: Welcart e-Commerce [usc-e-shop] < 2.9.6 Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 2.9.5 (inclusive) via deserialization of untrusted input in the welcart_confirm_check_ajax function. This makes it possible for administrators to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Affected versions: max 2.9.6.
Status: vulnerable

Welcart e-Commerce # bce540d0938766dd62258d8fccf75dac1c7b49f0

CVE, Research URL: bce540d0938766dd62258d8fccf75dac1c7b49f0
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Nov 14, 2023
Research Description: Welcart e-Commerce [usc-e-shop] < 2.9.5 WordPress Welcart e-Commerce Plugin <= 2.9.4 is vulnerable to Arbitrary File Upload Update the WordPress Welcart e-Commerce plugin to the latest available version (at least 2.9.5). WordFence discovered and reported this Arbitrary File Upload vulnerability in WordPress Welcart e-Commerce Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version 2.9.5.
Affected versions: max 2.9.5.
Status: vulnerable

Welcart e-Commerce # 26e13026-bba5-47de-afdc-1e5b4ad8bd81

CVE, Research URL: 26e13026-bba5-47de-afdc-1e5b4ad8bd81
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: Welcart e-Commerce [usc-e-shop] < 2.9.5 Welcart e-Commerce < 2.9.5 - Cross-Site Request Forgery The plugin is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.4. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to upload files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Since uploaded files were not verified properly, this could lead to arbitrary file upload.
Affected versions: max 2.9.5.
Status: vulnerable

Welcart e-Commerce # de991b08-d234-4ca4-87ef-0beb8a6a0c31

CVE, Research URL: de991b08-d234-4ca4-87ef-0beb8a6a0c31
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: -
Research Description: Welcart e-Commerce [usc-e-shop] < 2.9.6 Welcart e-Commerce < 2.9.6 - Admin+ PHP Object Injection The plugin is vulnerable to PHP Object Injection in all versions up to 2.9.5 (inclusive) via deserialization of untrusted input in the welcart_confirm_check_ajax function. This makes it possible for administrators to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Affected versions: max 2.9.6.
Status: vulnerable

Aug 08, 2026

Welcart e-Commerce # CVE-2026-16065

CVE, Research URL: CVE-2026-16065
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 06, 2026
Research Description: The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement, allowing users with the Editor role and above (including its custom shop-management roles) to perform SQL injection attacks.
Affected versions: max 2.11.32.
Status: vulnerable

Aug 15, 2026

Welcart e-Commerce # CVE-2026-16066

CVE, Research URL: CVE-2026-16066
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 12, 2026
Research Description: The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any visitor viewing the product page.
Affected versions: max 2.11.34.
Status: vulnerable

Welcart e-Commerce # CVE-2026-15213

CVE, Research URL: CVE-2026-15213
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 12, 2026
Research Description: The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store / bank-transfer settlement callback: an unauthenticated request can flip an order from unpaid to settled purely from an order number and a status flag, with no signature, amount, or origin check. Because these are pay-later methods, an attacker can mark their own unpaid order as settled and obtain fulfilment without paying.
Affected versions: max 2.11.33.
Status: vulnerable

Aug 23, 2026

Welcart e-Commerce # CVE-2025-15671

CVE, Research URL: CVE-2025-15671
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Aug 21, 2026
Research Description: The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request parameter, allowing an unauthenticated attacker to fixate a shop member's session and take over their customer account after the victim logs in through an attacker-crafted request.
Affected versions: max 2.12.1.
Status: vulnerable

Sep 02, 2026

Welcart e-Commerce # CVE-2026-19914

CVE, Research URL: CVE-2026-19914
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 01, 2026
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is delivered via the guest checkout form, requiring no authentication, and executes when an administrator views the affected order in the WordPress admin panel.
Affected versions: max 2.12.2.
Status: vulnerable

Sep 06, 2026

Welcart e-Commerce # CVE-2026-19887

CVE, Research URL: CVE-2026-19887
Home page URL: Security reports for Welcart e-Commerce
Application: Welcart e-Commerce
Date: Sep 05, 2026
Research Description: The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.1 via deserialization of untrusted input in the Telecom EDY payment callback (usces_action_acting_transaction). Unauthenticated attackers can store arbitrary 'reserve' key/value pairs as order metadata during a public checkout, then invoke the callback with an attacker-chosen 'option' parameter to select and unserialize that metadata without any provider signature, source-address, transaction-identity or ownership check. A POP chain is present in the TCPDF library bundled with the plugin itself, so no additional plugin or theme is required. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, including wp-config.php, which can lead to remote code execution when an attacker re-runs the WordPress installer against a database they control. Successful exploitation is contingent on an admin printing an invoice to trigger file deletion.
Affected versions: max 2.12.2.
Status: vulnerable