Welcart E Commerce
Approved changes feed: RSS · Atom
cpe:2.3:a:info@welcart:welcart_e-commerce:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Info@Welcart (706a8357-e1fc-5c7a-a709-30fe42bb704e) |
|---|---|
| Product | Welcart E Commerce (9b26af3c-b657-55f2-8375-62a8b035ada6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-49775 |
vulnerable | 2026-07-29 00:57:45.559826 |
WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability
MEDIUM (6.5)
Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.
Published: 2026-06-15T20:19:27.606Z
Updated: 2026-06-16T01:18:03.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62953 |
vulnerable | 2026-06-08 07:39:17.071725 |
WordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24.
Published: 2025-10-27T01:34:09.846Z
Updated: 2026-04-28T16:14:07.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58984 |
vulnerable | 2026-06-08 07:35:19.849534 |
WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.20.
Published: 2025-09-09T16:33:14.025Z
Updated: 2026-04-28T16:13:50.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54013 |
vulnerable | 2026-06-08 07:33:10.965918 |
WordPress Welcart e-Commerce plugin <= 2.11.16 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.
Published: 2025-07-16T10:36:42.275Z
Updated: 2026-04-28T16:13:28.579Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54012 |
vulnerable | 2026-06-08 07:33:10.963768 |
WordPress Welcart e-Commerce Plugin <= 2.11.16 - PHP Object Injection Vulnerability
HIGH (7.2)
Deserialization of Untrusted Data vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Object Injection.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16.
Published: 2025-08-20T08:03:04.359Z
Updated: 2026-04-28T16:13:28.085Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47511 |
vulnerable | 2026-06-08 07:27:14.487520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.