CVE-2023-6120 (published 2023-12-09T06:52:00.170Z)
The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_certificate_file function. This makes it possible for administrators to upload .pem or .crt files to arbitrary locations on the server.
Affected products: Vendor: uscnanbu
Product: Welcart e-Commerce
Versions: *