Uscnanbu

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 7
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-119166

    Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter

    Last Modified: Nov 03, 2026
    Published: Oct 31, 2026

    CVE-2026-118070

    Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameter

    Last Modified: Nov 01, 2026
    Published: Oct 31, 2026

    CVE-2026-107752

    Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie

    Last Modified: Oct 23, 2026
    Published: Oct 17, 2026

    CVE-2026-87091

    Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters

    Last Modified: Oct 04, 2026
    Published: Oct 03, 2026

    CVE-2026-19887

    Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback

    Last Modified: Sep 08, 2026
    Published: Sep 05, 2026
    Items Per Page
    Uscnanbu Vulnerabilities & Security CVEs | CVE-DB