Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:15:44 +0000 CVE-2021-4375 — Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure https://cve.radiocsirt.org/vuln/cve-2021-4375 <p><strong>Affected:</strong> uscnanbu Welcart e-Commerce</p> <p>The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the usces_download_system_information() function in versions up to, and including, 2.2.7. This makes it possible for authenticated attackers to download information including WordPress settings, plugin settings, PHP settings and server settings.</p> <p><strong>Affected:</strong> uscnanbu Welcart e-Commerce</p> <p>The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the usces_download_system_information() function in versions up to, and including, 2.2.7. This makes it possible for authenticated attackers to download information including WordPress settings, plugin settings, PHP settings and server settings.</p> https://cve.radiocsirt.org/vuln/cve-2021-4375