CVE-2026-118070 | Welcart E-Commerce Plugin up to 2.12.5 on WordPress gid cross site scripting

October 31, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Welcart E-Commerce Plugin up to 2.12.5 on WordPress. Impacted is an unknown function. Such manipulation of the argument gid leads to cross site scripting.

This vulnerability is referenced as CVE-2026-118070. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More