CVE-2026-109224 | SureCart Plugin up to 4.9.4 on WordPress Shortcode comment cross site scripting

October 16, 2026 Yanac

A vulnerability identified as problematic has been detected in SureCart Plugin up to 4.9.4 on WordPress. This issue affects some unknown processing of the component Shortcode Handler. Performing a manipulation of the argument Comment results in cross site scripting.

This vulnerability is reported as CVE-2026-109224. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More