CVE-2026-87091 | Welcart e-Commerce Plugin up to 2.12.2 on WordPress IPN Endpoint rel/option cross site scripting

October 3, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Welcart e-Commerce Plugin up to 2.12.2 on WordPress. Affected by this vulnerability is an unknown functionality of the component IPN Endpoint. This manipulation of the argument rel/option causes cross site scripting.

This vulnerability is handled as CVE-2026-87091. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More