CVE-2025-47511: Welcart E-Commerce

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Path Traversal.This issue affects Welcart e-Commerce: from n/a through <= 2.11.13.

Affected products

• Welcart Welcart E-Commerce: before 2.11.14 (fixed in 2.11.14)

Published 2025-06-09. Last modified 2026-06-17.