Skip to content
OpenAdvisories

Vendor

surecart

11 known vulnerabilities.

Products

SureCart 6 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments 4 WordPress Ecommerce For Creating Fast Online Stores 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-32548

    WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.

    surecart SureCart
  • Medium 6.5
    CVE-2026-57313

    WordPress SureCart plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions.

    surecart SureCart
  • Medium 6.5
    CVE-2026-39488

    WordPress SureCart plugin <= 4.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SureCart SureCart surecart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureCart: from n/a through <= 4.0.2.

    surecart SureCart
  • Medium 5.9
    CVE-2023-41241

    WordPress SureCart Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions.

    surecart WordPress Ecommerce For Creating Fast Online Stores Web / CMS