Approved changes feed: RSS · Atom

cpe:2.3:a:welcart:welcart_plugin:0.9.1:*:*:*:*:*:*:*

part: a version: 0.9.1 update: *

VendorWelcart (4af44389-c938-5bc7-8abb-f76dd3edae1d)
ProductWelcart Plugin (b5942932-3de0-5e5c-aa40-705583e64f84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5178 vulnerable 2026-06-08 05:02:55.097044 Details available
Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase.
Published: 2012-12-19T11:00:00.000Z
Updated: 2024-09-16T20:06:29.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5177 vulnerable 2026-06-08 05:02:55.094612 Details available
Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-12-19T11:00:00.000Z
Updated: 2024-09-16T23:21:51.832Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.