CVE-2020-28339

Description

References

• wordpress.org/plugins/usc-e-shop · Product
• wordfence.com/blog/2020/11/object-injection-vulnerability-in-welcart-e-commerce-plugin · Exploit

Altre vulnerabilità di welcart e-commerce

• CVE-2025-47511MEDIO 6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop a…
• CVE-2025-27130ALTO 8.8Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited,…
• CVE-2025-0511MEDIO 6.1The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and…
• CVE-2024-45366MEDIO 6.1Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script ma…
• CVE-2024-42404ALTO 8.8SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the inf…