| 2026-10-21 |
WPSEC-2026-1399 |
SureCart <= 4.9.6 - Unauthenticated Authentication Bypass via Passwordless Login Verification Code |
Critical 9.8 |
4.10.0 |
| 2026-10-21 |
WPSEC-2026-1398 |
SureCart <= 4.9.6 - Authenticated (Author+) Stored Cross-Site Scripting via Block Icon Name |
Medium 6.4 |
4.10.0 |
| 2026-10-21 |
WPSEC-2026-1397 |
SureCart <= 4.9.6 - Unauthenticated Path Traversal via REST API 'id' Parameter |
Medium 6.5 |
4.10.0 |
| 2026-10-21 |
WPSEC-2026-1396 |
SureCart <= 4.9.6 - Unauthenticated Open Redirect via Checkout 'page_url' Metadata |
Medium 6.1 |
4.10.0 |
| 2026-10-16 |
WPSEC-2026-1139 |
SureCart <= 4.9.5 - Unauthenticated Open Redirect via Checkout 'success_url' Metadata |
Medium 6.1 |
4.9.6 |
| 2026-10-16 |
WPSEC-2026-1138 |
SureCart <= 4.9.5 - Unauthenticated Sensitive Information Exposure via Product REST API List Endpoints |
Medium 5.3 |
4.9.6 |
| 2026-10-16 |
WPSEC-2026-1137 |
SureCart <= 4.9.5 - Unauthenticated Authentication Bypass via Passwordless Login Code Brute Force |
High 8.1 |
4.9.6 |
| 2026-10-14 |
WPSEC-2026-0929 |
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.4 - Unauthenticated Sensitive Information Exposure via Line Items and Checkouts REST Endpoints |
Medium 5.3 |
4.9.5 |
| 2026-10-14 |
WPSEC-2026-0928 |
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-icon Web Component |
Medium 5.4 |
4.9.5 |
| 2026-10-10 |
WPSEC-2026-0709 |
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Authenticated (Shop Worker+) PHP Object Injection via Integrations REST API |
Medium 6.6 |
4.9.4 |
| 2026-10-10 |
WPSEC-2026-0708 |
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Reflected Cross-Site Scripting via 'live_mode' Parameter |
Medium 6.1 |
4.9.4 |
