CVE-2026-106599

The SureCart WordPress plugin (versions up to and including 4.9.3 ) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . An attacker could potentially exploit this to perform object injection, leading to high confidentiality, integrity, and availability i...