Welcart e-Commerce

Commerce plugin <= 2.9.14 Broken Access Control + CSRF vulnerability <= 2.9.14

Commerce plugin <= 2.9.3 SQL Injection vulnerability <= 2.9.3

Commerce plugin <= 2.9.6 Authenticated (Administrator+) Directory Traversal vulnerability <= 2.9.6

Commerce plugin <= 2.9.5 Authenticated (Administrator+) PHP Object Injection vulnerability < 2.9.6

Commerce plugin <= 2.9.4 Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 2.9.4