CVE-2026-107653

The SureCart plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.9.4 . The flaw exists due to insufficient input sanitization and output escaping of the 'comment' parameter . An unauthenticated attacker can inject arbitrary web scripts tha...