TI-2026-36684 CVE-2026-49775 · GHSA-vh2q-m85w-97h5
WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability
Priority LOW 34
Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.
info@welcart
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
info@welcart records in CISA KEVNo info@welcart vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2025-33857 CVE-2025-54012 · GHSA-hjqj-qjq9-mvgj
WordPress Welcart e-Commerce Plugin <= 2.11.16 - PHP Object Injection Vulnerability
Priority LOW 34
Deserialization of Untrusted Data vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Object Injection.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.
TI-2025-36628 CVE-2025-58984 · GHSA-99gh-pgpq-v3fq
WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <…
TI-2025-33858 CVE-2025-54013 · GHSA-7r5g-766r-x96m
WordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <…
TI-2025-39101 CVE-2025-62953 · GHSA-2x76-q69m-x8p7
WordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability
Priority LOW 22
Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24…