CVE-2026-112241
WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
This vulnerability affects the SureCart plugin for WordPress, which allows attackers to bypass authentication by spoofing identity and gain unauthorized access. The impact could include unauthorized actions performed under another user's or an administrator's account on affected WordPress sites.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5.
Affected versions
- surecart
through 4.9.5