CVE-2026-112241
CVE-2026-112241 · WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5.
CVSS 9.8 · Critical · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
surecart
- Versions
- ≥ 0, ≤ 4.9.5: Affected; ≥ 4.9.6: Not affected (custom)
Update to 4.9.6