WordPress Plugin Vulnerabilities

Welcart e-Commerce < 1.4.18 - Multiple Vulnerabilities

Description

The Welcart e-Commerce WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability.

Affects Plugins

Plugin icon
usc-e-shop
Fixed in 1.4.18

References

CVE
CVE-2015-2973
URL
https://plugins.trac.wordpress.org/changeset/1199120
URL
http://www.welcart.com/community/archives/74867
URL
https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000103.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
8ebb2a93-f567-4118-a869-7d84cf0954a4

Timeline

Publicly Published
2015-07-15 (about 10 years ago)
Added
2015-07-25 (about 10 years ago)
Last Updated
2020-12-10 (about 5 years ago)

Other

Published
Title
Published
2015-08-26
Title
Private Only <= 3.5.1 - CSRF & XSS
Published
2016-08-10
Title
CampTix Event Ticketing < 1.5 - CSV Injection and XSS
Published
2020-01-17
Title
Marketo Forms and Tracking <= 1.0.2 - CSRF to XSS
Published
2019-06-19
Title
Shortlinks by Pretty Links <= 2.1.9 - Stored XSS and CSV Injection
Published
2017-05-31
Title
Simple Slideshow Manager <= 2.3 – Multiple Vulnerabilities