Exploited: 178
LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
VulnFeed.org
AREN

surecart vulnerabilities and fixes

Exploited and high-severity surecart vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.1CVE-2026-120574SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account TakeoverVerify fixsurecart SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads…
    1 min read
  2. 7.2CVE-2026-107653SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of sc-order-manual-instructions in CommentsVerify fixsurecart SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads…
    1 min read
Esc