Welcart

Japan Proprietary www.welcart.com ↗
C
CAUTION
13
Total CVEs
3
Crit / High
7
Medium
26%
Unpatched
0%
Patched
6.2
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
26%
Under Review
63%
Pending
11%
✓ 0 patched ✗ 5 unpatched ~ 12 under review ⏳ 2 pending score
▸ Intelligence by Audience
PoC Available
14 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"welcart" port:443
org:"Welcart" http.status:200
Top EPSS (Exploitation Probability)
CVE-2025-0511 0.90% exploitation probability
CVE-2025-27130 0.61% exploitation probability
CVE-2024-42404 0.48% exploitation probability
CVE-2025-47511 0.34% exploitation probability
CVE-2026-87091 0.31% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
13
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
26%
Avg CVSS score
6.2
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-08
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News

No recent security news found for Welcart.

▸ Recent CVEs showing 20 of 19
CVE IDSeverityPatchEPSSDate
CVE-2026-96761 7.1 HIGH UNKNOWN / UNPATCHED — 2026-10-09
CVE-2026-87091 7.2 HIGH PATCH UNDER REVIEW 0.31% 2026-10-03
CVE-2026-27539 PoC 7.1 HIGH UNKNOWN / UNPATCHED — 2026-08-13
CVE-2026-15213 PoC 5.3 MEDIUM UNKNOWN / UNPATCHED 0.11% 2026-08-12
CVE-2026-16066 PoC 5.4 MEDIUM UNKNOWN / UNPATCHED 0.16% 2026-08-12
CVE-2026-49775 6.5 MEDIUM PATCH UNDER REVIEW 0.19% 2026-06-15
CVE-2025-12979 PoC 5.3 MEDIUM PATCH UNDER REVIEW 0.09% 2025-11-13
CVE-2025-62953 PoC 4.3 MEDIUM PATCH UNDER REVIEW 0.04% 2025-10-27
CVE-2025-10651 PoC 5.5 MEDIUM PATCH UNDER REVIEW 0.03% 2025-10-22
CVE-2025-10649 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.03% 2025-10-08
CVE-2025-9367 PoC 5.5 MEDIUM PATCH UNDER REVIEW 0.06% 2025-09-10
CVE-2025-58984 PoC 5.9 MEDIUM PATCH UNDER REVIEW 0.04% 2025-09-09
CVE-2025-54012 PoC 7.2 HIGH PATCH UNDER REVIEW 0.16% 2025-08-20
CVE-2025-54013 PoC 5.9 MEDIUM PATCH UNDER REVIEW 0.17% 2025-07-16
CVE-2025-47511 PoC 6.8 MEDIUM PATCH UNDER REVIEW 0.34% 2025-06-09
CVE-2025-27130 PoC 6.3 MEDIUM UNKNOWN / UNPATCHED 0.61% 2025-04-01
CVE-2025-0511 PoC 7.2 HIGH PATCH UNDER REVIEW 0.90% 2025-02-12
CVE-2024-45366 ? N/A UNKNOWN / UNPATCHED 0.24% 2024-09-18
CVE-2024-42404 ? N/A UNKNOWN / UNPATCHED 0.48% 2024-09-18
View all 19 CVEs for Welcart →
▸Intel
CountryJapan
LicenseProprietary
Trust ScoreC — CAUTION
Max CVSS7.5
Last Updated2026-07-08
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
5 occurrences in Welcart CVEs (38% of total)
CWE-79 ⓘ
5
CWE-89
SQL Injection
2 occurrences in Welcart CVEs (15% of total)
CWE-89 ⓘ
2
CWE-502
Deserialization of Untrusted Data
2 occurrences in Welcart CVEs (15% of total)
CWE-502 ⓘ
2
CWE-862
Unknown Weakness Type
2 occurrences in Welcart CVEs (15% of total)
CWE-862 ⓘ
2
CWE-552
Unknown Weakness Type
1 occurrence in Welcart CVEs (8% of total)
CWE-552 ⓘ
1
CWE-22
Unknown Weakness Type
1 occurrence in Welcart CVEs (8% of total)
CWE-22 ⓘ
1
▸Company Profile

Welcart is a Japanese software vendor that develops and maintains the Welcart e-commerce plugin for WordPress, which is widely used in Japan for online shopping sites. Its cybersecurity relevance stems from the plugin's widespread adoption and the 15 tracked CVEs, indicating potential vulnerabilities that could impact a large number of Japanese e-commerce sites.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -87% better
CVE count 2026 vs 2025:  8 → 1 CVEs
Patch Speed ⓘ Poor (>65% open)
26% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Welcart C valtersit.com