SureCart vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SU

Product

SureCart

by Brainstorm Force · last CVE Oct 22, 2026

6

CVEs

0

On KEV

9.8

Max CVSS

6

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 3Medium 2Low 0

Severity

All severities6 Critical1 High3 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add SureCart to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-112241 New	9.8	0%	Oct 22	WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability Affected: through 4.9.5
CVE-2026-106599	8.8	0%	Oct 14	WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability Affected: through 4.9.3
CVE-2026-112221 New	7.1	0%	Oct 21	WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability Affected: through 4.9.5
CVE-2026-105874	7.1	0%	Oct 14	WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability Affected: through 4.9.3
CVE-2026-112840	6.5	0%	Oct 20	WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability Affected: through 4.9.5
CVE-2026-109697	6.5	0%	Oct 13	WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability Affected: through 4.9.4