https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T02:54:31.021784+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-05021 cnvd-2015-05021 2026-10-25T02:54:31.025327+00:00 cnvd-2015-05021 https://cve.radiocsirt.org/vuln/euvd-2026-91532 EUVD-2026-91532 2026-10-25T02:54:31.025362+00:00 EUVD-2026-91532 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2973 fkie_cve-2015-2973 2026-10-25T02:54:31.025390+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to (1) classes/usceshop.class.php, (2) includes/edit-form-advanced.php, (3) includes/edit-form-advanced30.php, (4) includes/edit-form-advanced34.php, (5) includes/member_edit_form.php, (6) includes/order_edit_form.php, (7) includes/order_list.php, or (8) includes/usces_item_master_list.php, related to admin.php.

 https://cve.radiocsirt.org/vuln/ghsa-6hc9-c5vg-gpqq GHSA-6hc9-c5vg-gpqq 2026-10-25T02:54:31.025420+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to (1) classes/usceshop.class.php, (2) includes/edit-form-advanced.php, (3) includes/edit-form-advanced30.php, (4) includes/edit-form-advanced34.php, (5) includes/member_edit_form.php, (6) includes/order_edit_form.php, (7) includes/order_list.php, or (8) includes/usces_item_master_list.php, related to admin.php.

 https://cve.radiocsirt.org/vuln/gsd-2015-2973 gsd-2015-2973 2026-10-25T02:54:31.025438+00:00 gsd-2015-2973 https://cve.radiocsirt.org/vuln/jvndb-2015-000103 jvndb-2015-000103 2026-10-25T02:54:31.025449+00:00

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site scripting (CWE-79) vulnerability due to the processing of usces_referer parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.