High
91f86c22-94db-4c43-985a-2f3dd96ece21
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 57
Reset filters
High
CVE-2023-5953
Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
f59004bb-b026-4137-a332-f46a09237e7b
Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery
Critical
CVE-2023-5952
Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection
Medium
CVE-2023-5951
Welcart e-Commerce <= 2.9.4 - Reflected Cross-Site Scripting
High
CVE-2023-40219
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload
High
CVE-2023-43610
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) SQL Injection
High
CVE-2023-43493
Welcart e-Commerce <= 2.8.21 - Authenticated(level_5+) SQL Injection via get_logs
High
CVE-2023-22705
Welcart e-Commerce <= 2.8.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4655
Welcart e-Commerce <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4236
Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2022-4237
Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
High
CVE-2022-4140
Welcart e-Commerce 2.6.10-2.8.4 - Information Disclosure via Arbitrary File Read
High
3b71805c-15bb-4cde-b91f-4f3e9b7ab520
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
Medium
CVE-2022-3946
Welcart e-Commerce <= 2.8.3 - Missing Authorization
Medium
CVE-2022-3935
Welcart e-Commerce <= 2.8.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
d6572568-5586-4ed9-b0e2-32509b42ed31
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
High
CVE-2022-41840
Welcart e-Commerce 2.6.0-2.7.7 - Information Disclosure via Arbitrary File Read
Medium
CVE-2021-4375
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
High
CVE-2021-4355
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
Medium
CVE-2021-20734
Welcart e-Commerce <= 2.2.3 - Reflected Cross-Site Scripting
High
e7ecd712-a7b3-40e2-b982-be8b58e9b8c3
Welcart e-Commerce <= 2.1.0 - SQL Injection
High
CVE-2020-28339
Welcart e-Commerce <= 1.9.35 - PHP Object Injection
Medium
CVE-2016-4826
Welcart e-Commerce < 1.8.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.