Skip to contentSurecart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments vulnerabilities
- surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & paymentsSureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account TakeoverCVE-2026-1205748.1 High
- surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & paymentsSureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of sc-order-manual-instructions in CommentsCVE-2026-1076537.2 High
- surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & paymentsSureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in CommentCVE-2026-1092247.2 High
- surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & paymentsSureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated WebhookCVE-2026-76558.1 High