Welcart vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Welcart products: 2 record(s), with severity, exploitation and fixes.

Welcart e-Commerce 2

Exploited only (KEV) →

CVE-2026-96761 High · 7.1 CWE-79 Oct 9, 2026

WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3.

CVE-2026-27539 High · 7.1 CWE-79 Aug 13, 2026

WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.