CVE · High

CVE-2026-109224 — SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments [surecart] < 4.9.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-109224 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments [surecart] < 4.9.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') High 7.2 < 4.9.5 4.9.5 2026-10-13 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.