WordPress Vulnerability Scanner WPSec
Vulnerabilities / SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments vulnerabilities

Advisories WPSec published for SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments. Other sources may list more. Its attack surface: SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-10 WPSEC-2026-0709 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Authenticated (Shop Worker+) PHP Object Injection via Integrations REST API Medium 6.6 4.9.4
2026-10-10 WPSEC-2026-0708 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Reflected Cross-Site Scripting via 'live_mode' Parameter Medium 6.1 4.9.4

License: CC BY 4.0