Information from Collne Inc.

Vulnerability ID:JVN#95082904
Title:WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.