https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:55:50.101238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-187422 EUVD-2026-187422 2026-10-06T21:55:50.104390+00:00 EUVD-2026-187422 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40532 fkie_cve-2023-40532 2026-10-06T21:55:50.104423+00:00

Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the files on the web server.

 https://cve.radiocsirt.org/vuln/ghsa-j977-c76j-564g GHSA-j977-c76j-564g 2026-10-06T21:55:50.104479+00:00

Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the files on the web server.

 https://cve.radiocsirt.org/vuln/gsd-2023-40532 gsd-2023-40532 2026-10-06T21:55:50.104497+00:00 gsd-2023-40532 https://cve.radiocsirt.org/vuln/jvndb-2023-000094 jvndb-2023-000094 2026-10-06T21:55:50.104508+00:00

WordPress plugin "Welcart e-Commerce" provided by Collne Inc. contains multiple vulnerabilities listed below. * Unrestricted Upload of File with Dangerous Type (CWE-434) - CVE-2023-40219 * Path Traversal (CWE-22) - CVE-2023-40532 * Cross-site Scripting in registration process of Item List page (CWE-79) - CVE-2023-41233 * Cross-site Scripting in Credit Card Payment Setup page (CWE-79) - CVE-2023-41962 * Cross-site Scripting in Item List page (CWE-79) - CVE-2023-43484 * SQL Injection in Item List page (CWE-89) - CVE-2023-43493 * SQL Injection in Order Data Edit page (CWE-89) - CVE-2023-43610 * Cross-site Scripting in Order Data Edit page (CWE-79) - CVE-2023-43614 CVE-2023-40219 Akihiro Hashimoto reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-40532, CVE-2023-41233, CVE-2023-41962, CVE-2023-43484, CVE-2023-43493, CVE-2023-43610, CVE-2023-43614 Shogo Kumamaru of LAC CyberLink Co., Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.