High
CVE-2026-96761
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 57
Reset filters
High
CVE-2026-87091
Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters
High
CVE-2026-19887
Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback
High
CVE-2026-19914
Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter
Medium
CVE-2025-15671
Welcart e-Commerce < 2.12.1 - Unauthenticated Session Fixation
Medium
CVE-2026-15213
Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass
High
CVE-2026-27539
Welcart e-Commerce <= 2.11.31 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-16066
Welcart e-Commerce <= 2.11.33 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-16065
Welcart e-Commerce <= 2.11.31 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-49775
Welcart e-Commerce <= 2.11.28 - Missing Authorization
Medium
CVE-2025-12979
Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure
Medium
CVE-2025-10651
Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail
Medium
CVE-2025-62953
Welcart e-Commerce <= 2.11.24 - Missing Authorization
Medium
CVE-2025-10649
Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie
Medium
CVE-2025-9367
Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-58984
Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-54012
Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2025-54013
Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-47511
Welcart e-Commerce <= 2.11.13 - Authenticated (Editor+) Arbitrary File Deletion
High
CVE-2025-0511
Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter
Medium
CVE-2024-42404
Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-32144
Welcart e-Commerce <= 2.9.14 - Missing Authorization
High
CVE-2023-50847
Welcart e-Commerce <= 2.9.3 - Authenticated(Editor+) SQL Injection
Medium
CVE-2023-6120
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.