CVE-2026-119166 | Welcart e-Commerce Plugin up to 2.12.5 on WordPress member[ID] resource injection

October 31, 2026 Yanac

A vulnerability classified as problematic was found in Welcart e-Commerce Plugin up to 2.12.5 on WordPress. This affects an unknown function. The manipulation of the argument member[ID] results in improper control of resource identifiers.

This vulnerability is reported as CVE-2026-119166. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More