search
SureCart
Trends
- 1Critical authentication bypass flaw flagged in SureCart pluginโผ๐จ EUVD-2026-108068 ๐ Score: 9.8/10 (CVSS v3.1) ๐ฆ Product: SureCart ๐ข Vendor: Brainstorm Force ๐ Updated: 2026-10-22 ๐ Au
A critical vulnerability, tracked as EUVD-2026-108068, has been disclosed in SureCart, the e-commerce plugin developed by Brainstorm Force. The flaw, rated 9.8 out of 10 on the CVSS v3.1 scale, allows authentication bypass through spoofing, potentially letting attackers abuse authentication on affected installations. All versions up to the patched release are affected, and WordPress store owners using the plugin are urged to update immediately.
- 2Cross-site scripting vulnerability disclosed in SureCart pluginโผ๐จ EUVD-2026-105137 ๐ Score: 6.5/10 (CVSS v3.1) ๐ฆ Product: SureCart ๐ข Vendor: Brainstorm Force ๐ Published: 2026-10-20 |
A medium-severity cross-site scripting vulnerability, tracked as EUVD-2026-105137, has been published for SureCart, the e-commerce plugin by vendor Brainstorm Force. The flaw, scored 6.5 out of 10 under CVSS v3.1, stems from improper neutralization of input during web page generation. It was disclosed on 20 October 2026 and updated the following day, prompting site owners to check for patched versions.