Welcart e-Commerce, ecaf1932-2b16-4303-8c21-cb70aeabbfdc
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Welcart e-Commerce [usc-e-shop] < 2.2.8 Welcart e-Commerce < 2.2.8 - Authenticated System Information Disclosure The usces_download_system_information AJAX action of the plugin did not have capability check in place, allowing any authenticated user (such as subscriber) to can export data including WordPress settings, theme and plugins (active/inactive) along with their version, Welcart general settings and payment method etc, as well as the server and PHP settings
- Affected versions
-
max 2.2.8.
- Status
-
vulnerable