CVE-2023-5952 | BDVDB-2026-218232 Detail

Welcart e-Commerce

Description#

The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Injection when a suitable gadget is present on the blog

Impact#

No impact statement in the source data.

Weaknesses#

CWE-502 Deserialization of Untrusted Data

References#

https://wpscan.com/vulnerability/0acd613e-dbd6-42ae-9f3d-6d6e77a4c1b7

Exploit#

https://wpscan.com/vulnerability/0acd613e-dbd6-42ae-9f3d-6d6e77a4c1b7

History#

Version 12023-12-04Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.