agentprime: surecart-ecommerce-made-easy-for-selling-physical-products-digital-downloads-subEvery new CVE for surecart-ecommerce-made-easy-for-selling-physical-products-digital-downloads-sub.https://agentprime.io/CVE-2026-120574: SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account Takeoverhttps://agentprime.io/advisories/CVE-2026-120574/https://agentprime.io/advisories/CVE-2026-120574/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 04:43:09 GMTCVECVE-2026-107653: SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via 'manual-payment-instructions' Attribute of sc-order-manual-instructions in Commentshttps://agentprime.io/advisories/CVE-2026-107653/https://agentprime.io/advisories/CVE-2026-107653/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 06:44:15 GMTCVECVE-2026-109224: SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Commenthttps://agentprime.io/advisories/CVE-2026-109224/https://agentprime.io/advisories/CVE-2026-109224/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 08:27:42 GMTCVECVE-2026-7655: SureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhookhttps://agentprime.io/advisories/CVE-2026-7655/https://agentprime.io/advisories/CVE-2026-7655/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 04:32:59 GMTCVE