Surecart 8 CVEs across 3 Surecart products. Browse Surecart vulnerabilities, severities, and proof-of-concept exploits.
Surecart products with known CVEs Surecart CVEs — newest first CVE Severity Score Published Summary CVE-2026-97245High 7.22026-09-30 Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions. CVE-2026-32548Medium 5.32026-08-06 Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions. CVE-2026-7655High 8.12026-07-11 The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3. This is due to the plugin… CVE-2026-57314High 7.12026-06-26 Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions. CVE-2026-57313Medium 6.52026-06-26 Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions. CVE-2026-39488Medium 6.52026-04-08 Missing Authorization vulnerability in SureCart SureCart surecart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Su… CVE-2024-43970High 7.12024-09-18 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SureCart allows Reflected XSS.This issue affects S… CVE-2023-41241Medium 5.92023-09-27 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions.