Product by Collne

    Welcart e-Commerce

    38 known vulnerabilities in Welcart e-Commerce (Collne), 0 of them actively exploited (CISA KEV).

    Key figures

    38

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Welcart e-Commerce (Collne)
    CriticalCVE-2022-41840

    Collne Welcart e-Commerce (WordPress plugin): Path Traversal

    also in 1 other product

    		7.5
    HighCVE-2022-4140

    Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access

    		7.5
    CriticalCVE-2023-5952

    Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection

    		9.8
    HighCVE-2020-28339

    Welcart e-Commerce: security vulnerability

    		7.5
    MediumCVE-2016-4825

    Welcart e-Commerce: security vulnerability

    		5.6
    HighCVE-2023-43610

    Collne Welcart e-Commerce: SQL Injection

    also in 1 other product

    		8.8
    HighCVE-2022-4237

    Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation

    		8.8
    MediumCVE-2016-4828

    Welcart e-Commerce: security vulnerability

    		6.5
    HighCVE-2023-40219

    Collne Welcart e-Commerce: security vulnerability

    also in 1 other product

    		7.2
    MediumCVE-2015-7791

    Welcart e-Commerce: SQL Injection

    		6.3
    MediumCVE-2016-4827

    Welcart e-Commerce: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2016-4826

    Welcart e-Commerce: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2021-4355

    Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure

    also in 1 other product

    		7.5
    HighCVE-2026-96761

    WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-42404

    Welcart e-Commerce: SQL Injection

    also in 1 other product

    		8.8
    MediumCVE-2021-20734

    Collne Welcart e-Commerce: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    HighCVE-2023-5953

    Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload

    		8.8
    MediumCVE-2022-4236

    Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access

    		6.5
    HighCVE-2026-27539

    WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-47511

    WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerability

    also in 1 other product

    		6.8
    MediumCVE-2023-43614

    Collne Welcart e-Commerce: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2023-43484

    Collne Welcart e-Commerce: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2023-43493

    Collne Welcart e-Commerce: SQL Injection

    also in 1 other product

    		4.9
    HighCVE-2023-50847

    WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection

    also in 1 other product

    		7.6
    MediumCVE-2023-41233

    Collne Welcart e-Commerce: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1

    All vulnerabilities in search

    All products by Collne