WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
usc-e-shop
Published
2022-11-21
Title
Welcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site Scripting
Slug
usc-e-shop
Published
2022-11-21
Title
Welcart e-Commerce < 2.8.4 - Subscriber+ Arbitrary Shipping Method Creation/Update/Deletion
Slug
usc-e-shop
Published
2022-12-05
Title
Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access
Slug
usc-e-shop
Published
2022-12-23
Title
Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode
Slug
usc-e-shop
Published
2022-12-05
Title
Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation
Slug
usc-e-shop
Published
2022-12-05
Title
Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access
Slug
usc-e-shop
Published
2023-01-27
Title
Welcart e-Commerce < 2.8.11 - Reflected XSS
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Editor+ SQL Injection
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Author+ SQL Injection
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Multiple XSS
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Author+ Path Traversal
Slug
usc-e-shop
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Editor+ Arbitrary File Upload
Slug
usc-e-shop
Published
2023-11-10
Title
Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload
Slug
usc-e-shop
Published
2023-11-10
Title
Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection
Slug
usc-e-shop
Published
2023-11-10
Title
Welcart e-Commerce < 2.9.5 - Reflected XSS
Slug
usc-e-shop
Published
2023-12-08
Title
Welcart e-Commerce < 2.9.7 - Authenticated (Administrator+) Directory Traversal
Slug
usc-e-shop
Published
2023-12-21
Title
Welcart e-Commerce < 2.9.4 - Authenticated(Editor+) SQL Injection
Slug
usc-e-shop
Published
2023-11-14
Title
Welcart e-Commerce < 2.9.5 - Cross-Site Request Forgery
Slug
usc-e-shop
Published
2023-11-15
Title
Welcart e-Commerce < 2.9.6 - Admin+ PHP Object Injection
Slug
usc-e-shop
Published
2024-04-12
Title
Welcart e-Commerce < 2.10.0 - Missing Authorization
Slug
usc-e-shop
Published
2024-09-18
Title
Welcart e-Commerce < 2.11.2 - Authenticated (Admin+) SQL Injection
Slug
usc-e-shop
Published
2025-02-11
Title
Welcart e-Commerce < 2.11.10 - Unauthenticated Stored Cross-Site Scripting via name Parameter
Slug
usc-e-shop
Published
2025-06-03
Title
Welcart e-Commerce < 2.11.14 - Authenticated (Editor+) Arbitrary File Deletion
Slug
usc-e-shop
Published
2025-07-16
Title
Welcart e-Commerce < 2.11.17 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
usc-e-shop
Published
2025-08-12
Title
Welcart e-Commerce < 2.11.17 - Authenticated (Editor+) PHP Object Injection