Skip to content

CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-41840

WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-11-18
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Collne Inc. Welcart e-Commerce (WordPress plugin)

<= 2.7.7 to ≤ 2.7.7affected

References

https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-7-7-unauth-directory-traversal-vulnerability?_s_id=cve ↗