The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fields searchSql / searchSkuSql)' parameter in all versions up to, and including, 2.12.4. This vulnerability allows authenticated attackers, with editor-level access and above, to append additional SQL queries into existing queries, potentially leading to sensitive information extraction fr [truncated]
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts, which can be executed when a user accesses an injected page. The IPN endpoint accepts 'rel [truncated]
The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection due to deserialization of untrusted input in the Telecom EDY payment callback. This allows unauthenticated attackers to store arbitrary 'reserve' key/value pairs as order metadata and then unserialize them without any checks, potentially leading to file deletion and remote code execution.
