What is CVE-2026-10524?

CVE-2026-10524 is a high-severity vulnerability in Cocart, classified under CWE-472. CVSS score: 7.5/10. Published 2026-08-06.

How severe is CVE-2026-10524?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Cocart

CVE-2026-10524

The CoCart WordPress plugin before 4.9.0 does not validate a user-supplied price value against the actual product price when items are added to the cart through one of its public REST API endpoints, allowing unauthenticated users to set ar…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Unknown Cocart — versions 0

Weakness classification (CWE)

CWE-472

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-10524?: CVE-2026-10524 is a high-severity vulnerability in Cocart, classified under CWE-472. CVSS score: 7.5/10. Published 2026-08-06.
How severe is CVE-2026-10524?: High severity. CVSS v3 base score is 7.5 out of 10.