Vulnerabilities / Welcart e-Commerce / WPSEC-2026-1573
Welcart e-Commerce <= 2.12.5 - Authenticated (Author+) Sensitive Information Exposure via Item CSV Export
Medium 4.3
CWE-200Fixed in 2.12.6
- ID
- WPSEC-2026-1573
- Plugin
- Welcart e-Commerce (usc-e-shop)
- Affected
- all versions before 2.12.6
- Remediation
- Update to 2.12.6 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-10-23
- Attack surface
- Welcart e-Commerce on WPSec AttackSurface
- Fix released
- Published
Description
The Welcart e-Commerce plugin for WordPress is vulnerable to Sensitive Information Exposure via the item CSV export and the item master list in all versions up to, and including, 2.12.5, due to the export and list queries not excluding private items of other users and the export always including each item's post password. This makes it possible for authenticated attackers with author-level access and above to read private items and the passwords of password-protected items that belong to other users.
References
- https://wpsec.com/vuln/WPSEC-2026-1573/
- https://plugins.svn.wordpress.org/usc-e-shop/tags/2.12.6/
- https://wordpress.org/plugins/usc-e-shop/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS