WordPress security by component

Friendly Functions for Welcart

Plugin description

Friendly Functions for Welcart is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 24, 2026; the highest CVE/CNA score is 6.1.

Plugin slug: friendly-functions-for-welcart

Latest vulnerability

CVE-2026-1208: Friendly Functions for Welcart: Cross-site request forgery

Friendly Functions for Welcart is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedJan 24, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 24, 2026	CVE-2026-1208 Friendly Functions for Welcart: Cross-site request forgery Friendly Functions for Welcart is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVDPending
Nov 21, 2024	CVE-2024-10726 Friendly Functions for Welcart: Cross-site request forgery Friendly Functions for Welcart is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE6.1 NVDPending