Approved changes feed: RSS · Atom

cpe:2.3:a:collne_inc.:welcart_e-commerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCollne Inc. (cbfe997b-764f-5cbb-96da-0c3f40781fe2)
ProductWelcart E Commerce (95051e26-e27d-5aa8-a135-c73c3563d5a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50847 vulnerable 2026-06-08 06:16:16.854892 WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.3.
Published: 2023-12-28T18:15:01.186Z
Updated: 2026-04-28T16:08:59.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43614 vulnerable 2026-06-08 06:12:37.514021 Details available
Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.
Published: 2023-09-26T08:19:56.004Z
Updated: 2024-09-24T14:49:33.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43610 vulnerable 2026-06-08 06:12:37.502247 Details available
SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.
Published: 2023-09-26T08:19:11.405Z
Updated: 2024-09-24T14:28:26.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43493 vulnerable 2026-06-08 06:12:31.725147 Details available
SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information.
Published: 2023-09-26T08:18:24.886Z
Updated: 2024-09-24T14:49:43.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43484 vulnerable 2026-06-08 06:12:31.604572 Details available
Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.
Published: 2023-09-26T08:17:31.412Z
Updated: 2024-09-24T14:49:50.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41962 vulnerable 2026-06-08 06:11:07.497714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41233 vulnerable 2026-06-08 06:11:05.599476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40532 vulnerable 2026-06-08 06:11:03.387190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40219 vulnerable 2026-06-08 06:09:41.485349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22705 vulnerable 2026-06-08 05:54:26.932143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20734 vulnerable 2026-06-08 05:29:10.460377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.