Live › vulnerability › CVE-2026-112241
Go to dashboardThe SureCart WordPress plugin from Brainstorm Force has an authentication bypass flaw in versions through 4.9.5, per the NVD entry. The sources do not say exactly how the spoofing works, but the reported impact is that an attacker can get past authentication.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed SureCart version in the WordPress admin plugin list, or run: wp plugin get surecart --field=version
4.9.5Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-112241")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.