https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:17:28.047325+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08982 bdu:2023-08982 2026-10-04T15:17:28.050935+00:00 bdu:2023-08982 https://cve.radiocsirt.org/vuln/euvd-2026-228596 EUVD-2026-228596 2026-10-04T15:17:28.050975+00:00 EUVD-2026-228596 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4140 fkie_cve-2022-4140 2026-10-04T15:17:28.050990+00:00

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server

 https://cve.radiocsirt.org/vuln/ghsa-6c75-m6fq-9mh7 GHSA-6c75-m6fq-9mh7 2026-10-04T15:17:28.051019+00:00

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server

 https://cve.radiocsirt.org/vuln/gsd-2022-4140 gsd-2022-4140 2026-10-04T15:17:28.051034+00:00 gsd-2022-4140 https://cve.radiocsirt.org/vuln/jvndb-2023-000007 jvndb-2023-000007 2026-10-04T15:17:28.051045+00:00

WordPress plugin "Welcart e-Commerce" provided by Collne Inc. contains a directory traversal vulnerability (CWE-22). Masato Ikeda of Mitsui Bussan Secure Directions, Inc. and Takeshi Suzuki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.