User Account Creation Vulnerability in SureCart Plugin for WordPress
CVE-2026-75793
Key Information:
Badges
What is CVE-2026-75793?
The SureCart plugin for WordPress prior to version 4.7.0 introduces a significant security risk by failing to respect the site's user registration settings. This oversight allows unauthenticated users to create new accounts on the WordPress site, bypassing registration restrictions. As a result, even when account registration is disabled, these users can gain a logged-in session, potentially leading to unauthorized access to sensitive areas of the site. Users and administrators are advised to update to version 4.7.0 or later to mitigate this security issue.
Affected Version(s)
SureCart 0 < 4.7.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.