Product by Uscnanbu

    Welcart E-commerce

    14 known vulnerabilities in Welcart E-commerce (Uscnanbu), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Welcart E-commerce (Uscnanbu)
    HighCVE-2026-19887

    Uscnanbu Welcart e-Commerce: Deserialization of Untrusted Data

    		8.8
    HighCVE-2026-19914

    Uscnanbu Welcart e-Commerce: Cross-site Scripting

    		7.2
    HighCVE-2026-87091

    Uscnanbu Welcart e-Commerce: Cross-site Scripting

    		7.2
    HighCVE-2026-118070

    Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameter

    		7.2
    HighCVE-2021-4355

    Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure

    also in 1 other product

    		7.5
    MediumCVE-2026-119166

    Uscnanbu Welcart e-Commerce: Improper Authentication

    		5.3
    MediumCVE-2026-107752

    Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie

    		4.9
    HighCVE-2025-0511

    Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter

    also in 1 other product

    		7.2
    MediumCVE-2025-10649

    Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie

    		6.5
    MediumCVE-2021-4375

    Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure

    also in 1 other product

    		4.3
    MediumCVE-2025-10651

    Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail

    		5.5
    MediumCVE-2025-12979

    Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure

    		5.3
    MediumCVE-2025-9367

    Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting

    		5.5
    MediumCVE-2023-6120

    Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal

    also in 1 other product

    		4.1

    All products by Uscnanbu