Threat database

6 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-49775Welcart e-Commerce · Missing Authorization Medium6.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-49775 Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions. EPSS 0.3%Vulnerability info@welcart #cwe-862	CVE Database V5	2026-06-15
Medium	4.3	EPSS 0.2%	CVE-2025-62953Welcart e-Commerce · Missing Authorization Medium4.3EPSS 0.2%2025-10-27CVE Database V5CVE-2025-62953 Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24. EPSS 0.2%Vulnerability info@welcart	CVE Database V5	2025-10-27
Medium	5.9	EPSS 0.2%	CVE-2025-58984Welcart e-Commerce · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in info@welcart… Medium5.9EPSS 0.2%2025-09-09CVE Database V5CVE-2025-58984 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.20. EPSS 0.2%Vulnerability info@welcart	CVE Database V5	2025-09-09
High	7.2	EPSS 0.5%	CVE-2025-54012Welcart e-Commerce · Deserialization of Untrusted Data High7.2EPSS 0.5%2025-08-20CVE Database V5CVE-2025-54012 Deserialization of Untrusted Data vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Object Injection.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16. EPSS 0.5%Vulnerability info@welcart	CVE Database V5	2025-08-20
Medium	5.9	EPSS 0.2%	CVE-2025-54013Welcart e-Commerce · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in info@welcart… Medium5.9EPSS 0.2%2025-07-16CVE Database V5CVE-2025-54013 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.16. EPSS 0.2%Vulnerability info@welcart	CVE Database V5	2025-07-16
Medium	6.8	EPSS 0.5%	CVE-2025-47511Welcart e-Commerce · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in info@welcart Welcart… Medium6.8EPSS 0.5%2025-06-09CVE Database V5CVE-2025-47511 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affects Welcart e-Commerce: from n/a through <= 2.11.13. EPSS 0.5%Vulnerability info@welcart	CVE Database V5	2025-06-09

Showing 1–6 of 6 results