CVE-2016-4828

EUVD-2016-5810
The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
welcartwelcart_e-commerce
𝑥
< 1.8.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN61578437/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118
http://www.welcart.com/community/archives/78977
http://jvn.jp/en/jp/JVN61578437/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118
http://www.welcart.com/community/archives/78977