← All advisories

High severity7.5NVD Advisory· Published Nov 18, 2022· Updated Jun 17, 2026

CVE-2022-41840

CVE-2022-41840

Description

Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Welcart/E Commerce
cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*
Range: <2.7.8
WordPress/Welcart eCommercellm-create
Range: <=2.7.7
Collne Inc./Welcart e-Commerce (WordPress plugin)v5
Range: <= 2.7.7

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-7-7-unauth-directory-traversal-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.