WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Editor+ SQL Injection
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Author+ SQL Injection
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Multiple XSS
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Author+ Path Traversal
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Editor+ Arbitrary File Upload
Slug
usc-e-shop
Published
2023-11-10
Title
Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
Slug
usc-e-shop
Published
2023-11-10
Title
Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection
Slug
usc-e-shop
Published
2023-11-10
Title
Welcart e-Commerce < 2.9.5 - Reflected XSS
Slug
usc-e-shop
Published
2023-12-08
Title
Welcart e-Commerce < 2.9.7 - Authenticated (Administrator+) Directory Traversal
Slug
usc-e-shop
Published
2023-12-21
Title
Welcart e-Commerce < 2.9.4 - Authenticated(Editor+) SQL Injection
Slug
usc-e-shop
Published
2023-11-14
Title
Welcart e-Commerce < 2.9.5 - Cross-Site Request Forgery
Slug
usc-e-shop
Published
2023-11-15
Title
Welcart e-Commerce < 2.9.6 - Admin+ PHP Object Injection
Slug
usc-e-shop
Published
2024-04-12
Title
Welcart e-Commerce < 2.10.0 - Missing Authorization
Slug
usc-e-shop
Published
2024-09-18
Title
Welcart e-Commerce < 2.11.2 - Authenticated (Admin+) SQL Injection
Slug
usc-e-shop
Published
2025-02-11
Title
Welcart e-Commerce < 2.11.10 - Unauthenticated Stored Cross-Site Scripting via name Parameter
Slug
usc-e-shop
Published
2025-06-03
Title
Welcart e-Commerce < 2.11.14 - Authenticated (Editor+) Arbitrary File Deletion
Slug
usc-e-shop
Published
2025-07-16
Title
Welcart e-Commerce < 2.11.17 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
usc-e-shop
Published
2025-08-12
Title
Welcart e-Commerce < 2.11.17 - Authenticated (Editor+) PHP Object Injection
Slug
usc-e-shop
Published
2025-09-09
Title
Welcart e-Commerce < 2.11.21 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
usc-e-shop
Published
2025-09-09
Title
Welcart e-Commerce < 2.11.21 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
usc-e-shop
Published
2025-10-07
Title
Welcart e-Commerce < 2.11.22 - Authenticated (Author+) SQL Injection via Cookie
Slug
usc-e-shop
Published
2025-10-21
Title
Welcart e-Commerce < 2.11.23 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail
Slug
usc-e-shop
Published
2025-10-14
Title
Welcart e-Commerce < 2.11.25 - Missing Authorization
Slug
usc-e-shop
Published
2025-11-12
Title
Welcart e-Commerce < 2.11.25 - Missing Authorization to Unauthenticated Information Exposure
Slug
use-any-font
Published
2022-01-31
Title
Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending