SU
Vendor
SureCart
9
CVEs
0
On KEV
2
New 30D
Products
SU7.2
SureCart
SureCart
7 CVEs0 on KEV1 new
SE8.1
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments
surecart
2 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109224 | SE SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments surecart | 7.2 | Oct 16 | SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment |
| CVE-2026-97245 | SU SureCart SureCart | 7.2 | Sep 30 | WordPress SureCart plugin <= 4.7.2 - Privilege Escalation vulnerability |
| CVE-2026-32548 | SU SureCart SureCart | 5.3 | Aug 6 | WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerability |
| CVE-2026-7655 | SE SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments surecart | 8.1 | Jul 11 | SureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook |
| CVE-2026-57314 | SU SureCart SureCart | 7.1 | Jun 26 | WordPress SureCart plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57313 | SU SureCart SureCart | 6.5 | Jun 26 | WordPress SureCart plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39488 | SU SureCart SureCart | 6.5 | Apr 8 | WordPress SureCart plugin <= 4.0.2 - Broken Access Control vulnerability |
| CVE-2024-43970 | SU SureCart SureCart | 6.1 | Sep 17 | WordPress SureCart plugin <= 2.29.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2023-41241 | SU Surecart Surecart | 4.8 | Sep 27 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions |