Known vulnerabilities in the Welcart E Commerce plugin

• Welcart e-Commerce - Security Vulnerability (CVE-2026-87091) HIGH 2026-10-03
• Welcart E Commerce - Remote Code Execution (CVE-2026-19887) HIGH 2026-09-05
• Welcart e-Commerce - Cross-Site Scripting (XSS) (CVE-2026-19914) HIGH 2026-09-01
• Welcart e-Commerce - Security Vulnerability (CVE-2025-15671) MEDIUM 2026-08-21
• Welcart e-Commerce - Cross-Site Scripting (XSS) (CVE-2026-27539) HIGH 2026-08-13
• Welcart e-Commerce - Security Vulnerability (CVE-2026-15213) MEDIUM 2026-08-12
• Welcart e-Commerce - Cross-Site Scripting (XSS) (CVE-2026-16066) MEDIUM 2026-08-12
• Welcart e-Commerce - SQL Injection (CVE-2026-16065) MEDIUM 2026-08-06
• Welcart e-Commerce - Broken Access Control (CVE-2026-49775) MEDIUM 2026-06-15
• Welcart e-Commerce - Broken Access Control (CVE-2025-12979) MEDIUM 2025-11-13
• Welcart e-Commerce - Cross-Site Scripting (XSS) (CVE-2025-10651) MEDIUM 2025-10-22
• Welcart e-Commerce - SQL Injection (CVE-2025-10649) MEDIUM 2025-10-08
• Welcart e-Commerce - Cross-Site Scripting (XSS) (CVE-2025-9367) MEDIUM 2025-09-10
• Welcart E Commerce - Path Traversal (CVE-2025-47511) MEDIUM 2025-06-09
• Welcart E Commerce - Cross-Site Scripting (XSS) (CVE-2025-0511) HIGH 2025-02-12
• Welcart E Commerce - Broken Access Control (CVE-2024-32144) MEDIUM 2024-06-11
• Welcart E Commerce - SQL Injection (CVE-2023-50847) HIGH 2023-12-28
• Welcart E Commerce - Path Traversal (CVE-2023-6120) MEDIUM 2023-12-09
• Welcart E Commerce - PHP Object Injection (CVE-2023-5952) CRITICAL 2023-12-04
• Welcart E Commerce - Cross-Site Request Forgery (CSRF) (CVE-2023-5953) HIGH 2023-12-04
• Welcart E Commerce - Cross-Site Scripting (XSS) (CVE-2023-5951) MEDIUM 2023-12-04
• Welcart E Commerce - Broken Access Control (CVE-2021-4375) MEDIUM 2023-06-07
• Welcart E Commerce - Broken Access Control (CVE-2021-4355) HIGH 2023-06-07
• Welcart E Commerce - Cross-Site Scripting (XSS) (CVE-2023-22705) HIGH 2023-03-29
• Welcart E Commerce - Cross-Site Scripting (XSS) (CVE-2022-4655) MEDIUM 2023-01-16
• Welcart E Commerce - PHP Object Injection (CVE-2022-4237) HIGH 2023-01-02
• Welcart E Commerce - Improper Input Validation (CVE-2022-4140) HIGH 2023-01-02
• Welcart E Commerce - Improper Input Validation (CVE-2022-4236) MEDIUM 2023-01-02
• Welcart E Commerce - Cross-Site Request Forgery (CSRF) (CVE-2022-3946) MEDIUM 2022-12-12
• Welcart E Commerce - Cross-Site Scripting (XSS) (CVE-2022-3935) MEDIUM 2022-12-12

Browse the full threat database