https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T02:08:48.417426+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-104285 EUVD-2026-104285 2026-10-25T02:08:48.420728+00:00 EUVD-2026-104285 https://cve.radiocsirt.org/vuln/fkie_cve-2014-10017 fkie_cve-2014-10017 2026-10-25T02:08:48.420767+00:00

Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in the usces_itemedit page to wp-admin/admin.php.

 https://cve.radiocsirt.org/vuln/ghsa-phvh-hgwf-69j7 GHSA-phvh-hgwf-69j7 2026-10-25T02:08:48.420800+00:00

Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in the usces_itemedit page to wp-admin/admin.php.

 https://cve.radiocsirt.org/vuln/gsd-2014-10017 gsd-2014-10017 2026-10-25T02:08:48.420818+00:00 gsd-2014-10017 https://cve.radiocsirt.org/vuln/jvndb-2014-007612 jvndb-2014-007612 2026-10-25T02:08:48.420830+00:00

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a SQL injection (CWE-89) vulnerability due to the processing of changeSort parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.