Skip to content
OpenAdvisories

Vendor

mainichiweb

2 known vulnerabilities.

Products

Friendly Functions for Welcart 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-1208 Public exploit

    Friendly Functions for Welcart <= 1.2.5 - Cross-Site Request Forgery to Settings Update

    The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5. This is due to missing or incorrect nonce validation on the settings page. This makes it possible for unauthentica…

    mainichiweb Friendly Functions for Welcart Web / CMS
  • Medium 6.1
    CVE-2024-10726

    Friendly Functions for Welcart <= 1.2.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

    The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.4. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthent…

    mainichiweb Friendly Functions for Welcart Web / CMS