Surecart

7 CVEs across 3 Surecart products. Browse Surecart vulnerabilities, severities, and proof-of-concept exploits.

Surecart products with known CVEs

ProductCVEs
Surecart6
Surecart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments1
WordPress Ecommerce For Creating Fast Online Stores1
Surecart CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32548Medium5.32026-08-06Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.
CVE-2026-7655High8.12026-07-11The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3. This is due to the plugin…
CVE-2026-57314High7.12026-06-26Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions.
CVE-2026-57313Medium6.52026-06-26Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions.
CVE-2026-39488Medium6.52026-04-08Missing Authorization vulnerability in SureCart SureCart surecart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Su…
CVE-2024-43970High7.12024-09-18Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SureCart allows Reflected XSS.This issue affects S…
CVE-2023-41241Medium5.92023-09-27Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions.