Vendors / SureCart Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 7
Exploited now SureCart records in CISA KEV No SureCart vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00469 · Published 2026-07-11 · No fix listed CWE-640
Priority LOW 37
The SureCart plugin for WordPress is vulnerable to unauthenticated account takeover in all versions up to, and including, 4.9.5.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00331 · Published 2026-11-03 · No fix listed CWE-287
Priority LOW 34
Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00332 · Published 2026-09-30 · No fix listed CWE-266
Priority LOW 31
The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in a…
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.0028 · Published 2026-10-31 · No fix listed CWE-79
Priority LOW 31
The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in a…
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.0028 · Published 2026-10-16 · No fix listed CWE-79
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-06-26 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SureCart allows Reflected XSS.This issue affects SureCart: from n/a through 2.29.3.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00271 · Published 2024-09-17 · No fix listed CWE-79
Priority LOW 30
Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-08-06 · No fix listed CWE-862
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00224 · Published 2026-06-26 · No fix listed CWE-79
Priority LOW 28
Missing Authorization vulnerability in SureCart SureCart surecart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureCart: from n/a through <= 4.0.2.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00191 · Published 2026-04-08 · No fix listed CWE-862
Priority LOW 26
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <= 2.5.0 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00355 · Published 2023-09-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 7 4 0 0
THREATIST.IORead the docs