Description
Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| info@welcart | Welcart e-Commerce | ≤ 2.11.28 | — |
Medium · 6.5
CVE-2026-49775
EUVD-2026-36895GHSA-vh2q-m85w-97h5
WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack