CVE-2026-111027: Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter

Q: Who can exploit this issue?

A user with the WordPress Editor role or a higher-privileged role can exploit it. The issue is therefore relevant where Editor-level accounts are untrusted, compromised, or accessible to multiple users.

Q: Which deployments are affected?

Welcart e-Commerce versions before 2.12.6 are affected. The provided information does not state whether any particular WordPress or Welcart configuration is required beyond use of a vulnerable plugin version.

Q: What access does an attacker need?

The attacker must be authenticated with an Editor role or higher and able to supply the log_id parameter. The vulnerability permits SQL injection through that parameter.

Published Oct 28, 2026

Updated

The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the escaping it had applied before running the query, allowing users with the Editor role or higher to perform SQL injection attacks.

Affected Software

1 affected component

Welcart Welcart e-Commerce<2.12.6

Event History

Oct 28, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

A user with the WordPress Editor role or a higher-privileged role can exploit it. The issue is therefore relevant where Editor-level accounts are untrusted, compromised, or accessible to multiple users.

Which deployments are affected?

Welcart e-Commerce versions before 2.12.6 are affected. The provided information does not state whether any particular WordPress or Welcart configuration is required beyond use of a vulnerable plugin version.

What access does an attacker need?

The attacker must be authenticated with an Editor role or higher and able to supply the log_id parameter. The vulnerability permits SQL injection through that parameter.

CVE-2026-111027: Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What access does an attacker need?