CVE-2026-106599
CVE-2026-106599 · WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.
CVSS 8.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
surecart
- Versions
- ≥ 0, ≤ 4.9.3: Affected; ≥ 4.9.4: Not affected (custom)
Update to 4.9.4