CVE-2026-120574 | SureCart Plugin up to 4.9.5 on WordPress Passwordless One-Time-Code Login verify permission

A vulnerability classified as critical has been found in SureCart Plugin up to 4.9.5 on WordPress. This affects the function VerificationCodeController::verify of the component Passwordless One-Time-Code Login. The manipulation leads to permission issues.

This vulnerability is listed as CVE-2026-120574. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More