CVE-2026-107653 | SureCart Plugin up to 4.9.4 on WordPress Buy Button Block comment cross site scripting

October 31, 2026 Yanac

A vulnerability was found in SureCart Plugin up to 4.9.4 on WordPress and classified as problematic. This issue affects some unknown processing of the component Buy Button Block. The manipulation of the argument Comment results in cross site scripting.

This vulnerability is known as CVE-2026-107653. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More