CVE-2020-28339

概要

参考情報

• wordpress.org/plugins/usc-e-shop · Product
• wordfence.com/blog/2020/11/object-injection-vulnerability-in-welcart-e-commerce-plugin · Exploit

welcart e-commerce のその他の脆弱性

• CVE-2025-47511中 6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop a…
• CVE-2025-27130高 8.8Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited,…
• CVE-2025-0511中 6.1The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and…
• CVE-2024-45366中 6.1Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script ma…
• CVE-2024-42404高 8.8SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the inf…