https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-47511.htmlhttps://patchthecve.com/cve/CVE-2025-47511.htmlWed, 17 Jun 2026 09:28:13 +0000MEDIUM 6.8: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affects Welcart e-Commerce: from n/a through <= 2.11.13.https://patchthecve.com/cve/CVE-2025-27130.htmlhttps://patchthecve.com/cve/CVE-2025-27130.htmlWed, 17 Jun 2026 09:03:04 +0000HIGH 8.8: Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.https://patchthecve.com/cve/CVE-2025-0511.htmlhttps://patchthecve.com/cve/CVE-2025-0511.htmlWed, 17 Jun 2026 08:26:37 +0000HIGH 7.2: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 2.11.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrihttps://patchthecve.com/cve/CVE-2024-45366.htmlhttps://patchthecve.com/cve/CVE-2024-45366.htmlWed, 17 Jun 2026 07:54:05 +0000MEDIUM 6.1: Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.https://patchthecve.com/cve/CVE-2024-42404.htmlhttps://patchthecve.com/cve/CVE-2024-42404.htmlWed, 17 Jun 2026 07:49:23 +0000HIGH 8.8: SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.https://patchthecve.com/cve/CVE-2024-32144.htmlhttps://patchthecve.com/cve/CVE-2024-32144.htmlWed, 17 Jun 2026 07:29:21 +0000MEDIUM 5.4: Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.