CVE-2025-62953: Info@welcart Welcart E-Commerce

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24.

Affected products

• Info@welcart Welcart E-Commerce: up to and including 2.11.24

Published 2025-10-27. Last modified 2026-10-08.