Welcart E Commerce
Approved changes feed: RSS · Atom
cpe:2.3:a:collne:welcart_e-commerce:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Collne (6598b16e-72d7-53af-92d2-1d9f41690518) |
|---|---|
| Product | Welcart E Commerce (9a45deda-38f0-513d-87b6-da90e0b8a246) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/usc-e-shop |
purl2cpe | 2026-06-01 10:14:02.941314 |
pkg:github/wpplugins/usc-e-shop |
purl2cpe | 2026-06-01 10:14:02.941316 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6120 |
vulnerable | 2026-06-08 06:19:46.269290 |
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
MEDIUM (4.1)
The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_certificate_file function. This makes it possible for administrators to upload .pem or .crt files to arbitrary locations on the server.
Published: 2023-12-09T06:52:00.170Z
Updated: 2026-04-08T16:42:44.227Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5953 |
vulnerable | 2026-06-08 06:19:45.201561 |
Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server
Published: 2023-12-04T21:28:03.020Z
Updated: 2025-05-29T13:53:03.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50847 |
vulnerable | 2026-06-08 06:16:16.855773 |
WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.3.
Published: 2023-12-28T18:15:01.186Z
Updated: 2026-04-28T16:08:59.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43614 |
vulnerable | 2026-06-08 06:12:37.514063 |
Details available
Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.
Published: 2023-09-26T08:19:56.004Z
Updated: 2024-09-24T14:49:33.403Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43610 |
vulnerable | 2026-06-08 06:12:37.502290 |
Details available
SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.
Published: 2023-09-26T08:19:11.405Z
Updated: 2024-09-24T14:28:26.043Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43493 |
vulnerable | 2026-06-08 06:12:31.725302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43484 |
vulnerable | 2026-06-08 06:12:31.606255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41962 |
vulnerable | 2026-06-08 06:11:07.497756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41233 |
vulnerable | 2026-06-08 06:11:05.601702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40219 |
vulnerable | 2026-06-08 06:09:41.486191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22705 |
vulnerable | 2026-06-08 05:54:26.933043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4655 |
vulnerable | 2026-06-08 05:52:00.120406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4237 |
vulnerable | 2026-06-08 05:51:37.024222 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4236 |
vulnerable | 2026-06-08 05:51:37.023718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4140 |
vulnerable | 2026-06-08 05:51:36.861710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41840 |
vulnerable | 2026-06-08 05:49:28.716352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3946 |
vulnerable | 2026-06-08 05:48:22.683124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3935 |
vulnerable | 2026-06-08 05:48:22.660215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4375 |
vulnerable | 2026-06-08 05:38:09.292647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4355 |
vulnerable | 2026-06-08 05:38:09.259263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28339 |
vulnerable | 2026-06-08 05:23:54.005090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4828 |
vulnerable | 2026-06-08 05:07:55.318880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4827 |
vulnerable | 2026-06-08 05:07:55.318530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4826 |
vulnerable | 2026-06-08 05:07:55.318176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4825 |
vulnerable | 2026-06-08 05:07:55.316969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.