CVE-2026-84099

CVE-2026-84099 affects the wpstorecart WordPress plugin (IDB Ecommerce, wpStoreCart 5) in versions through 5.0.7 . The root cause is that the plugin fails to prevent direct, unauthenticated access to a bundled add-on — specifically the wpsc-membership-pro component in paypal.php — which deseriali...