medium6.5
CVE-2016-4828
The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of …
Impact
The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Welcart | Welcart E-Commerce | before 1.8.3 |