PT-2026-127834

CVE-2026-111031

Published

2026-10-26

Updated

2026-10-28

Description by

CVSS 3.1

4.7

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce WordPress plugin versions prior to 2.12.6

Description An open redirect issue exists due to insufficient validation of a user-supplied URL used in a redirect. This allows unauthenticated attackers to redirect users to arbitrary external websites if they can trick them into performing a specific action.

Recommendations Update the plugin to version 2.12.6 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Osman Hussein

Vendors

Affected products

Weakness enumeration

CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')

Related identifiers