WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access
WordPress Welcart e-Commerce plugin before 2.8.5 is susceptible to arbitrary file access. The plugin does not validate user input before using it to output the content of a file, which can allow an attacker to read arbitrary files on the server, obtain sensitive information, modify data, and/or execute unauthorized operations.
welcart_e-commercePoC 已收录
CVSS7.5EPSS 69.0%