WordPress News

SureCart 4.9.6 Released

high confidence based on 1 community posts

What’s new in SureCart 4.9.6

Released: October 16th, 2026

Active installations: 80,000

Tested up to WordPress 7.1.3

Requires PHP 7.4

New: Product variants can now appear as individual listings in Google rich results and Google Merchant Center.
Fix: Creating an invoice failed for stores using Shippo, because a phone number was required but there was no field to enter it.
Fix: The product page template could put classic themes into quirks mode, causing layout issues.
Fix: The checkout now only redirects to a custom success URL on your own site. A success URL on another domain falls back to the form’s success page.
Fix: Hardened data access checks to keep information scoped to the right users (props to Erwan from WPScan).
Fix: Strengthened security of the passwordless login code flow (props to Wordfence).

4.9.5 — October 12th, 2026

Fix: The “Leave a review” link in Review Request emails opened the customer dashboard instead of the product’s review form.
Fix: Hardened data access checks to keep information scoped to the right users (props to Erwan from WPScan).
Fix: Improved output escaping and input sanitization in several areas (props to dzaku of PatchStack and UKO – Korea University of Wordfence).

4.9.4 — October 9th, 2026

Improvement: The MCP settings tab now installs the MCP Adapter plugin from WordPress.org, so it appears under Plugins and receives normal updates.
Fix: The “Charge tax on this product” toggle showed as off and disabled when opening a product by navigating within the admin instead of loading the page directly.
Fix: Refreshing the checkout page after clicking Buy Now no longer loses the checkout. It is now kept in the URL, so a refresh shows the same items instead of an empty checkout or the saved cart.
Fix: Hardened handling of stored data to only accept expected formats (props to Ananda Dhakal of PatchStack).
Fix: Improved output escaping in an additional area (props to neurotx of PatchStack).