Welcart e-Commerce
Moderate fix1 remedy
cpe:2.3:a:welcart:e-commerce:*:*:*:*:wordpress:*:*
Moderate fix1 remedy
- <= 2.11.6
Welcart e-Commerce Untrusted Data Deserialization Vulnerability Allowing Arbitrary Code Execution
Vulnerability
Patched
A vulnerability allowing untrusted data deserialization has been identified in the Welcart e-Commerce WordPress plugin, specifically in versions through 2.11.6. This vulnerability could be exploited by remote, unauthenticated attackers to execute arbitrary code on websites using this plugin.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the affected WordPress site.
Remediation
Users are advised to update the Welcart e-Commerce plugin to version 2.11.12, which addresses this vulnerability. Instructions for updating the plugin are available on the Welcart website.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.2impact
10.0exploitability
7.6remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.