uscnanbu Welcart e-Commerce

3 known vulnerabilities in uscnanbu Welcart e-Commerce, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-87091 CVSS 7.2 high The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all…
  • CVE-2026-19887 CVSS 8.8 high The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.1 via…
  • CVE-2026-19914 CVSS 7.2 high The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' parameter in all versions…