Welcart E Commerce
Approved changes feed: RSS · Atom
cpe:2.3:a:welcart_inc.:welcart_e-commerce:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Welcart Inc. (cb28edde-a17a-587a-8c9d-38fc63edf57e) |
|---|---|
| Product | Welcart E Commerce (f2b6c194-3db8-526c-919c-c3dc43530e48) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27130 |
vulnerable | 2026-06-08 07:14:54.190939 |
Details available
MEDIUM (6.3)
Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.
Published: 2025-04-01T08:57:25.711Z
Updated: 2025-04-01T15:16:20.041Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45366 |
vulnerable | 2026-06-08 06:48:05.967304 |
Details available
Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.
Published: 2024-09-18T05:20:41.822Z
Updated: 2024-11-05T21:19:16.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42404 |
vulnerable | 2026-06-08 06:43:56.614673 |
Details available
SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.
Published: 2024-09-18T05:20:30.045Z
Updated: 2024-09-18T15:19:17.953Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32144 |
vulnerable | 2026-06-08 06:35:32.962802 |
WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.
Published: 2024-06-11T15:48:28.788Z
Updated: 2026-04-28T16:09:34.927Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.