Welcart e-Commerce 16

To plugin page Claim VDP

WordPress Welcart e-Commerce Plugin <= 2.7.7 is vulnerable to Directory Traversal

Patch immediately High priority

Not known to be exploited Report an attack

7.5

High severity CVSS 3.1 score

Patchstack automatically mitigates this vulnerability with a vPatch.

Enable Protection

Patchstack Professional users are protected since 09.12.2022

Enable Protection

Solution

Update to fix

vPatch available

Update the WordPress Welcart e-Commerce plugin to the latest available version (at least 2.7.8).

Nguyen Anh Tien discovered and reported this Directory Traversal vulnerability in WordPress Welcart e-Commerce Plugin. This could allow a malicious actor to see all files in a given directory or determine if certain files/directories exist in given folder. This can be used to exploit other weaknesses in the system This vulnerability has been fixed in version 2.7.8.

Other vulnerabilities in this plugin

0 present

16 patched

View all