Known vulnerabilities in Welcart e-Commerce

Software CPE: cpe:2.3:a:uscnanbu:usc-e-shop:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Welcart e-Commerce Welcart e-Commerce is affected by 15 known vulnerabilities: 1 high, 6 medium, 8 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116921 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-10649
CWE-89 Medium
No
No
2.11.22 13.10.2025 SB2025101375
#VU106342 - Deserialization of Untrusted Data
CVE-2025-27130
CWE-502 High
No
No
2.11.12 01.04.2025 SB2025040119
#VU81064 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43614
CWE-79 Low
No
No
2.8.22 22.09.2023 SB2023092230
#VU81063 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-43610
CWE-89 Medium
No
No
2.8.22 22.09.2023 SB2023092230
#VU81058 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-43493
CWE-89 Medium
No
No
2.8.22 22.09.2023 SB2023092230
#VU81057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43484
CWE-79 Low
No
No
2.8.22 22.09.2023 SB2023092230
#VU81055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41962
CWE-79 Low
No
No
2.8.22 22.09.2023 SB2023092230
#VU81054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41233
CWE-79 Low
No
No
2.8.22 22.09.2023 SB2023092230
#VU81053 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-40532
CWE-22 Low
No
No
2.8.22 22.09.2023 SB2023092230
#VU81052 - Unrestricted Upload of File with Dangerous Type
CVE-2023-40219
CWE-434 Low
No
No
2.8.22 22.09.2023 SB2023092230
#VU71200 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-4140
CWE-22 Medium
No
No
2.8.5 17.01.2023 SB2023011706
#VU68658 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41840
CWE-22 Medium
No
No
2.7.8 25.10.2022 SB2022102517
#VU54046 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20734
CWE-79 Low
No
No
2.2.4 11.06.2021 SB2021061102
#VU48209 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28339
CWE-94 Medium
No
No
1.9.36 07.11.2020 SB2020110940
#VU19798 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-4826
CWE-79 Low
No
No
1.8.3 02.08.2019 SB2016062402