CVE-2026-112241

CRITICAL NVD

CVSS Score 9.8

Severity CRITICAL

Published Oct 22, 2026

Vendor unknown

Description

Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5.

References

https://patchstack.com/database/wordpress/plugin/surecart/vulnerability/wordpress-surecart-plugin-4-9-5-broken-authentication-vulnerability?_s_id=cve