uscnanbu

Records53All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

uscnanbu records in CISA KEV

No uscnanbu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Welcart E-commerce 36 records HIGH E-commerce 2 records LOW Welcart Plugin 2 records LOW

Records

2 records in Welcart Plugin · all components

TI-2012-04367 CVE-2012-5178 · GHSA-gcqw-jc7p-cm29

Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0107 Published 2012-12-19 No fix listed CWE-352

TI-2012-04366 CVE-2012-5177 · GHSA-87p7-g773-mghv

Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress…

LOW 24

Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01948 Published 2012-12-19 No fix listed CWE-79

Open these records in search →

Critical	2
High	19
Medium	32
Low	0
No CVSS	0