fluentcart_a_new_era_of_ecommerce_faster_lighter_and_simpler vulnerabilities
CVEs whose affected-version data names the fluentcart_a_new_era_of_ecommerce_faster_lighter_and_simpler package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-103525High· 7.5FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters
The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the 'order_id + billing_address_id (also shipping…
▾ Twilightwpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simplervia CVEORG
CVE-2026-103518Medium· 4.9FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys
The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].<attacker-chosen key>' parameter in all versions up to, and including, 1.7.…
▾ Sunlitwpmanageninja · FluentCart A New Era of eCommerce – Faster, Lighter, and Simplervia CVEORG