Skip to content
OpenAdvisories

Vendor

Welcart

9 known vulnerabilities.

Products

Welcart e-Commerce 8 e-Commerce Plugin 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119503

    WordPress Welcart e-Commerce plugin <= 2.12.6 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Code Injection.This issue affects Welcart e-Commerce: from n/a through 2.12.6.

    Welcart Welcart e-Commerce
  • Medium 4.3
    CVE-2026-120597 Scanner template

    Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scripting

    A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTT_MAIN::error_page_message of the file classes/paymentESCOTT.main.class.php. Such manipulation of the argument ResponseCd leads to cross site…

    Welcart e-Commerce Plugin
  • Medium 6.3
    CVE-2025-27130

    Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulner…

    Welcart Welcart e-Commerce
  • Medium 6.1
    CVE-2024-45366

    Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a…

    Welcart Welcart e-Commerce
  • Medium 5.4
    CVE-2024-32144

    WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.

    Welcart Welcart e-Commerce