Security Advisory
CVE-2026-75793
CVSS 6.5
MEDIUM
Vulnerability Description
The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.
Published Date
2026-09-06T07:16:43.220
Data Feed
NIST National Vulnerability Database