THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-75793 (MEDIUM 6.5) — The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.

[NVD] CVE-2026-75793 (MEDIUM 6.5) — The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.

mednvdPublished 2026-09-06

CVE-2026-75793 CVSS: 6.5 MEDIUM Published: 2026-09-06T07:16:43.220

The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled.

Indicators of compromise

CVE-2026-75793cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-75793