Welcart Inc. Welcart E Commerce vulnerabilities

4 vulnerabilities

Known vulnerabilities in Welcart Inc. Welcart E Commerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-27130welcart inc.welcart e-commerce+1
EPSS score
0.46%
Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.8.8CVE-2024-42404welcart inc.welcart e-commerce+2
EPSS score
0.48%
SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.6.1CVE-2024-45366welcart inc.welcart e-commerce+1
EPSS score
0.26%
Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.5.4CVE-2024-32144welcart inc.welcart e-commerce+2
EPSS score
0.34%
Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.