CVE-2026-75793 — SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login

CVE-2026-75793

SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login PUBLISHED

Description (CNA)

The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.

Affected (CNA)

Vendor / product	Versions
Unknown / SureCart	affected 0 before 4.7.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d1c2ea43-2643-4cdf-8dfe-e11109266f51/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.