uscnanbu
Web & CMS Pluginscommercial
Top products
Latest CVEs
The 10 most recently published vulnerabilities affecting uscnanbu.
- CVE-2026-19887Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback8.8
- CVE-2026-19914Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter7.2
- CVE-2025-12979Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure5.3
- CVE-2025-10651Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail5.5
- CVE-2025-10649Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie6.5
- CVE-2025-9367Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting5.5
- CVE-2025-0511Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter7.2
- CVE-2023-6120Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal4.1
- CVE-2021-4375Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure4.3
- CVE-2021-4355Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure7.5