6.5
Moyenne
CVE-2026-75793 The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating…
Description
The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SureCart 4.7 | premières → < 4.7.0 | 4.7.0 |