CVE-2025-15671 | Welcart e-Commerce Plugin up to 2.12.0 on WordPress Request improper authentication

August 21, 2026 Yanac

A vulnerability was found in Welcart e-Commerce Plugin up to 2.12.0 on WordPress. It has been rated as critical. The affected element is an unknown function. The manipulation of the argument Request leads to improper authentication.

This vulnerability is uniquely identified as CVE-2025-15671. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More