CVE-2016-4828

The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.

Score

CVSS 3.1 6.5 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2016-06-25

Last modified

2024-08-06

Weaknesses

CWE-19

Affected products

• Welcart E-commerce (Welcart)

References

• http://jvn.jp/en/jp/JVN61578437/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118
• http://www.welcart.com/community/archives/78977