https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:16:52.788751+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-12979 CVE-2025-12979 — Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure 2026-10-08T11:16:52.805256+00:00

Affected: uscnanbu Welcart e-Commerce

The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'usces_export' action in all versions up to, and including, 2.11.24. This makes it possible for unauthenticated attackers to access configured payment credentials (ex. PayPal api secret) , as well as business contact details, mail templates, and other operational settings tied to the store.