WordPress News

SureCart 4.9.5 Released

high confidence based on 1 community posts

What’s new in SureCart 4.9.5

Released: October 12th, 2026

Active installations: 80,000

Tested up to WordPress 7.1.3

Requires PHP 7.4

Fix: The “Leave a review” link in Review Request emails opened the customer dashboard instead of the product’s review form.
Fix: Hardened data access checks to keep information scoped to the right users (props to Erwan from WPScan).
Fix: Improved output escaping and input sanitization in several areas (props to dzaku of PatchStack and UKO – Korea University of Wordfence).

4.9.4 — October 9th, 2026

Improvement: The MCP settings tab now installs the MCP Adapter plugin from WordPress.org, so it appears under Plugins and receives normal updates.
Fix: The “Charge tax on this product” toggle showed as off and disabled when opening a product by navigating within the admin instead of loading the page directly.
Fix: Refreshing the checkout page after clicking Buy Now no longer loses the checkout. It is now kept in the URL, so a refresh shows the same items instead of an empty checkout or the saved cart.
Fix: Hardened handling of stored data to only accept expected formats (props to Ananda Dhakal of PatchStack).
Fix: Improved output escaping in an additional area (props to neurotx of PatchStack).

4.9.3 — October 5th, 2026

Fix: In the customer dashboard, switching plans within an upgrade group did not show the group’s draft (members-only) products to customers who own a product in that group.