Welcart e-Commerce

Commerce plugin <= 2.11.9 Unauthenticated Stored CrossSite Scripting via name Parameter vulnerability <= 2.11.9

Commerce plugin <= 2.9.14 Broken Access Control + CSRF vulnerability <= 2.9.14

Commerce plugin <= 2.9.3 SQL Injection vulnerability <= 2.9.3

Commerce plugin <= 2.9.6 Authenticated (Administrator+) Directory Traversal vulnerability <= 2.9.6

Commerce plugin <= 2.9.5 Authenticated (Administrator+) PHP Object Injection vulnerability < 2.9.6