WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability

2022-10-2000:00:00

Tien Nguyen Anh (Patchstack Alliance)

patchstack.com

wordpress

welcart

ecommerce

vulnerability

directory traversal

tien nguyen anh

patchstack alliance

update

version 2.7.8

plugin

0.016 Low

EPSS

Percentile

87.5%

JSON

Unauth. Directory Traversal vulnerability discovered by Tien Nguyen Anh (Patchstack Alliance) in the WordPress Welcart e-Commerce plugin (versions <= 2.7.6).

Solution

           Update the WordPress Welcart e-Commerce plugin to the latest available version (at least 2.7.8).

CPENameOperatorVersion
welcart e-commercele2.7.7

CPE	Name	Operator	Version
	welcart e-commerce	le	2.7.7

0.016 Low

EPSS

Percentile

87.5%

JSON

Related for PATCHSTACK:9DD1AB6776B052F7964390D8B961A1DB