Info@welcart vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Info@welcart products: 2 record(s), with severity, exploitation and fixes.

Welcart e-Commerce 2

Exploited only (KEV) →

CVE-2026-49775 Medium · 6.5 CWE-862 Jun 15, 2026

WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.

CVE-2025-62953 Medium · 4.3 CWE-862 Oct 26, 2025

WordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24.