Skip to contentWpmanageninja Fluentcart vulnerabilities
- wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simplerFluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' ParameterCVE-2026-1205778.1 High
- wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simplerFluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' ParametersCVE-2026-1035257.5 High
- wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simplerFluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array KeysCVE-2026-1035184.9 Medium
- wpmanageninja fluentcartWordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerabilityCVE-2026-1096957.5 High
- wpmanageninja fluentcartWordPress FluentCart plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-679717.1 High
- wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simplerFluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' ParameterCVE-2025-134954.9 Medium