Known vulnerabilities in SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments
Make ecommerce easy with a simple-to-use, all-in-one platform that anyone can set up in just a few minutes!
15Reported vulnerabilities
9.3Highest CVSS score
4.6.4Latest version
80,000+Active installs
What to do now
Update SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments to 4.9.5 or later.
15 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2026-9065 | Critical | 0.4% | O up to (but not including) 4.2.1 | 4.2.1 |
May 20, 2026 |
| CVE-2026-18480 | High | 0.2% | Before 4.6.3 | 4.6.3 |
September 7, 2026 |
| CVE-2026-7655 | High | 0.5% | 0 to 4.2.3 (inclusive) | 4.3.0 |
July 11, 2026 |
| CVE-2026-106599 | High | 0.4% | 4.9.3 and earlier | 4.9.4 |
October 12, 2026 |
| CVE-2026-109224 | High | 0.3% | 0 to 4.9.4 (inclusive) | 4.9.5 |
October 16, 2026 |
| CVE-2026-105874 | High | 0.2% | 4.9.3 and earlier | 4.9.4 |
October 12, 2026 |
| CVE-2026-109697 | Medium | 0.1% | 4.9.4 and earlier | 4.9.5 |
October 13, 2026 |
| CVE-2026-97245 | Medium | 0.3% | 4.7.2 and earlier | 4.7.3 |
September 24, 2026 |
| CVE-2026-57313 | Medium | 0.2% | 4.2.2 and earlier | 4.2.3 |
June 25, 2026 |
| CVE-2026-57314 | Medium | 0.3% | 4.3.2 and earlier | 4.3.3 |
June 26, 2026 |
| CVE-2024-43970 | Medium | 0.3% | 2.29.3 and earlier | 2.29.4 |
August 28, 2024 |
| CVE-2026-75793 | Medium | 0.3% | Before 4.7.0 | 4.7.0 |
September 8, 2026 |
| CVE-2026-32548 | Medium | 0.3% | 4.6.2 and earlier | 4.6.3 |
August 6, 2026 |
| CVE-2023-41241 | Medium | 0.4% | 2.5.0 and earlier | 2.5.1 |
September 27, 2023 |
| CVE-2026-39488 | Medium | 0.3% | 4.0.2 and earlier | 4.0.3 |
March 26, 2026 |