Skip to content
OpenAdvisories

Vendor

uscnanbu

14 known vulnerabilities.

Products

Welcart e-Commerce 14
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-119166

    Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter

    The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.12.5 via the 'member[ID]' parameter due to missing validation on a user controlled key. This makes it possible for unauthenti…

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 4.9
    CVE-2026-107752

    Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie

    The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fields searchSql / searchSkuSql)' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied par…

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 5.3
    CVE-2025-12979

    Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure

    The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'usces_export' action in all versions up to, and including, 2.11.24. This makes it possible for unauthenticated attackers to acce…

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 5.5
    CVE-2025-10651

    Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail

    The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'order_mail' setting in versions up to, and including, 2.11.22. This is due to insufficient sanitization on the order_mail field and a lack of escaping on output.…

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 6.5
    CVE-2025-10649

    Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie

    The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient escaping on the user supplied value and lack of sufficient preparation on the existing SQL query. This …

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 5.5
    CVE-2025-9367

    Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting

    The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 2.11.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 4.1
    CVE-2023-6120

    Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal

    The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_certificate_file function. This makes it possible for administrators to upload .pem or .crt files to arbitrary location…

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 4.3
    CVE-2021-4375

    Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure

    The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the usces_download_system_information() function in versions up to, and including, 2.2.7. This makes it possible for authenticated attackers…

    uscnanbu Welcart e-Commerce Web / CMS