Welcart e-Commerce

Commerce plugin <= 2.9.5 Authenticated (Administrator+) PHP Object Injection vulnerability < 2.9.6

Commerce plugin <= 2.9.4 Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 2.9.4

Commerce plugin <= 2.8.21 Authenticated(level_5+) SQL Injection via get_logs vulnerability < 2.8.22

Commerce plugin <= 2.8.10 Cross Site Scripting (XSS) vulnerability <= 2.8.10

Contributor+ Stored XSS via Shortcode vulnerability < 2.8.9