Welcart e-Commerce

Commerce plugin <= 2.11.22 Authenticated (Editor+) Stored CrossSite Scripting via order_mail vulnerability <= 2.11.22

Commerce plugin <= 2.11.21 Authenticated (Author+) SQL Injection via Cookie vulnerability <= 2.11.21

Commerce Plugin <= 2.11.20 Cross Site Scripting (XSS) Vulnerability <= 2.11.20

Commerce Plugin <= 2.11.16 PHP Object Injection Vulnerability <= 2.11.16

Commerce plugin <= 2.11.16 Cross Site Scripting (XSS) Vulnerability <= 2.11.16