Vulnerabilities in Welcart Inc.
4 resultsCVE-2024-42404HIGHSQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the infEPSS 0.5%CVE-2025-27130MEDIUMWelcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited,EPSS 0.4%CVE-2024-32144MEDIUMWordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-45366MEDIUMWelcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script maEPSS 0.2%