CVE-2016-4828

The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.

Date published : 2016-06-25

http://www.welcart.com/community/archives/78977

http://jvn.jp/en/jp/JVN61578437/index.html