Skip to content
Sign in
6.5 Medium

CVE-2026-75793 The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating…

Description

The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.

Affected products and versions

Product Affected versions Fixed in
SureCart 4.7 earliest → < 4.7.0 4.7.0

Other CVEs of SureCart

The 3 CVEs of SureCart →
CVE-2026-108073 The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include… 5.3 Medium CVE-2026-18480 The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same… 8.8 High
Track this CVE