CVE-2026-120574 - SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account Takeover
CVE ID :CVE-2026-120574 Published : Nov. 3, 2026, 5:18 a.m. | 1 hour, 45 minutes ago Description :The SureCart plugin for WordPress is vulnerable to unauthenticated account takeover in all versions up to, and including, 4.9.5. The passwordless one-time-code login REST route...