CVE-2016-4828: Welcart E-Commerce

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.

Affected products

• Welcart Welcart E-Commerce: before 1.8.3 (fixed in 1.8.3)

Published 2016-06-25. Last modified 2026-06-17.