Collne Inc. vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 202310

Newest CVEs

• CVE-2023-50847

  WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection

  Collne Inc. · Welcart e-Commerce

  High7.6
• CVE-2023-43614

  Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an…

  Collne Inc. · Welcart e-Commerce

  Medium6.1
• CVE-2023-43610

  SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or…

  Collne Inc. · Welcart e-Commerce

  High8.8
• CVE-2023-43493

  SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive…

  Collne Inc. · Welcart e-Commerce

  Medium4.9
• CVE-2023-43484

  Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an…

  Collne Inc. · Welcart e-Commerce

  Medium6.1
• CVE-2023-41962

  Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to…

  Collne Inc. · Welcart e-Commerce

  Medium6.1
• CVE-2023-41233

  Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker…

  Collne Inc. · Welcart e-Commerce

  Medium6.1
• CVE-2023-40532

  Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the…

  Collne Inc. · Welcart e-Commerce

  Medium4.3
• CVE-2023-40219

  Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.

  Collne Inc. · Welcart e-Commerce

  High7.2
• CVE-2023-22705

  WordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

  Collne Inc. · Welcart e-Commerce

  High7.1