Unknown Surecart vulnerabilities

• surecart SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter CVE-2026-108073 5.3 MediumOctober 21, 2026
• surecart SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login CVE-2026-75793 6.5 MediumSeptember 6, 2026
• surecart SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover CVE-2026-18480 8.8 HighSeptember 6, 2026