Vulnerabilities / Welcart e-Commerce
Welcart e-Commerce vulnerabilities
Advisories WPSec published for Welcart e-Commerce. Other sources may list more. Its attack surface: Welcart e-Commerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0933 | Welcart e-Commerce <= 2.12.4 - Cross-Site Request Forgery to Member Account Update and Login | High 8.1 | 2.12.5 |
| 2026-10-14 | WPSEC-2026-0932 | Welcart e-Commerce <= 2.12.4 - Unauthenticated Payment Bypass via Forged Digitalcheck Card Payment Notification | Medium 5.3 | 2.12.5 |
| 2026-10-14 | WPSEC-2026-0931 | Welcart e-Commerce <= 2.12.4 - Unauthenticated Payment Amount Manipulation via 'money' Parameter | Medium 5.3 | 2.12.5 |
| 2026-10-14 | WPSEC-2026-0930 | Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via Order List Search Condition Cookie | Medium 4.9 | 2.12.5 |
License: CC BY 4.0