Extension WordPress
Vulnérabilités Welcart e-Commerce, page 3
Cette page rassemble les failles publiées pour Welcart e-Commerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Welcart e-Commerce
48 fiches
Welcart e-Commerce <= 1.8.2 – Authentication Bypass
The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.
*-1.8.2
1.8.3
24/06/2016
Welcart e-Commerce <= 1.8.2 – Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826.
*-1.8.2
1.8.3
24/06/2016
Welcart e-Commerce < 1.5.3 – SQL Injection
Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) search[column] or (2) switch parameter.
[*, 1.5.3)
1.5.3
17/12/2015
Welcart e-Commerce < 1.4.18 – Multiple Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to (1) classes/usceshop.class.php, (2) includes/edit-form-advanced.php, (3) includes/edit-form-advanced30.php, (4) includes/edit-form-advanced34.php, (5) includes/member_edit_form.php,…
[*, 1.4.18)
1.4.18
15/07/2015
Welcart e-Commerce <= 2.9.1 – SQL Injection
The Welcart e-Commerce for WordPress is vulnerable to SQL Injection via the ‘changeSort’ and 'switch' parameters in versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
*-2.9.1
2.9.2
04/03/2014
Welcart e-Commerce <= 1.3.12 – Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) unspecified vectors related to purchase_limit or the (2) name, (3) intl, (4) nocod,…
*-1.3.12
Non indiqué
03/03/2014
Welcart e-Commerce < 1.2.2 – Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase.
[*, 1.2.2)
1.2.2
14/12/2012
Welcart e-Commerce < 1.2.2 – Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
[*, 1.2.2)
1.2.2
14/12/2012
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.