Login Request a demo
SU
Product
SureCart
by SureCart · last CVE Sep 30, 2026
7
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 0
Severity
All severities7Critical0High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SureCart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97245
7.2
0%
Sep 30
WordPress SureCart plugin <= 4.7.2 - Privilege Escalation vulnerability
Affected: through 4.7.2
CVE-2026-57314
7.1
0%
Jun 26
WordPress SureCart plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 4.3.2
CVE-2026-57313
6.5
0%
Jun 26
WordPress SureCart plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.2.2
CVE-2026-39488
6.5
0%
Apr 8
WordPress SureCart plugin <= 4.0.2 - Broken Access Control vulnerability
Affected: through 4.0.2
CVE-2024-43970
6.1
0%
Sep 18
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SureCart allows Reflected XSS.This issue affects SureCart: from n/a…
Affected: before 2.29.4
CVE-2026-32548
5.3
0%
Aug 6
WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerability
Affected: through 4.6.2
CVE-2023-41241
4.8
0%
Sep 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions
Affected: through 2.5.0
Showing 7