Unknown Fast Courier vulnerabilities

• unknown fast courier Fast Courier 5.0.0 - 5.2.3 - Unauthenticated SQLi via 'wp_order_id' Parameter CVE-2026-89288 8.6 HighOctober 14, 2026
• unknown fast courier Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint CVE-2026-89289 5.3 MediumOctober 6, 2026