Unrated severityNVD Advisory· Published Oct 28, 2026

CVE-2026-111031

Description

The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect users to arbitrary external websites.

Affected products

WordPress/Welcart e-Commercellm-fuzzy
Range: <2.12.6

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/7cb3af79-5295-4458-843b-b38e1c3fde25/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000