Threats tagged 'ghsa-x4hx-935f-mhv9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-111031The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a Medium2026-10-28GCVE DatabaseCVE-2026-111031 The Welcart e-Commerce WordPress plugin versions before 2.12.6 contain a vulnerability where user-supplied URLs are not validated before being used in redirects. This flaw allows unauthenticated attackers to redirect users to arbitrary external websites. Report on CVE-2026-111031 Vulnerability #ghsa-x4hx-935f-mhv9	GCVE Database	2026-10-28

Page 1 of 1