Vendor

Welcart

2 briefs RSS

Stored Cross-Site Scripting in Welcart e-Commerce Plugin

An unauthenticated stored Cross-Site Scripting vulnerability in the Welcart e-Commerce WordPress plugin allows attackers to inject malicious scripts via settlement notification parameters.

Welcart e-Commerce web-application xss wordpress

1r 2t 1c 1w ago

high advisory

Stored Cross-Site Scripting in Welcart e-Commerce Plugin

1 rule 1 TTP 1 CVE

An unauthenticated stored XSS vulnerability in the Welcart e-Commerce WordPress plugin (CVE-2026-19914) allows attackers to inject malicious scripts that execute in the context of administrative sessions.

PoC Welcart e-Commerce web-vulnerability xss wordpress cve-2026-19914

1r 1t 1c Sep 1, 2026