Welcart Inc. — Vulnerabilities & Security Advisories 4

Welcart develops an e-commerce WordPress plugin enabling online stores with product management and payment processing capabilities. Historically, the plugin has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues. These weaknesses often stem from insufficient input validation and improper access controls. The four publicly disclosed CVEs highlight persistent security challenges, with RCE being the most critical class affecting versions prior to 2.7.3. While no major public breaches have been documented, the consistent vulnerability pattern suggests ongoing security concerns for merchants using outdated implementations.