Welcart vulnerabilities
5 published CVEs name Welcart among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119505
WordPress Welcart e-Commerce plugin <= 2.12.6 - Cross Site Scripting (XSS) vulnerability
Welcart · Welcart e-Commerce
High7.1 - CVE-2026-119503
WordPress Welcart e-Commerce plugin <= 2.12.6 - Content Injection vulnerability
Welcart · Welcart e-Commerce
Medium6.5 - CVE-2026-120597
Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scripting
Welcart · e-Commerce Plugin
Medium5.3 - CVE-2026-96761
WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability
Welcart · Welcart e-Commerce
High7.1 - CVE-2026-27539
WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability
Welcart · Welcart e-Commerce
High7.1