Skip to content
OpenAdvisories

Vendor

info@welcart

6 known vulnerabilities.

Products

Welcart e-Commerce 6
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-49775

    WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.

    info@welcart Welcart e-Commerce
  • Medium 4.3
    CVE-2025-62953

    WordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability

    Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24.

    info@welcart Welcart e-Commerce
  • Medium 5.9
    CVE-2025-58984

    WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.20.

    info@welcart Welcart e-Commerce
  • Medium 5.9
    CVE-2025-54013

    WordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.

    info@welcart Welcart e-Commerce
  • Medium 6.8
    CVE-2025-47511

    WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affects Welcart e-Commerce: from n/a through <= 2.11.13.

    info@welcart Welcart e-Commerce