CVE-2026-14927

The FluentCart A New Era of eCommerce WordPress plugin versions prior to 1.5.3 contains an authorization bypass vulnerability. The plugin fails to perform proper authorization or ownership checks when rendering customer order documents that are indexed using sequential numeric identifiers . This ...

CVE-2026-14926 FluentCart < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering via IDOR

The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a subscription belongs to the requesting customer in several of its payment-method endpoints, allowing any authenticated customer to act on another customer's subscription changing its payment method, or...

WordPress FluentCart A New Era of eCommerce plugin < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering vulnerability

Subscriber+ Subscription Payment-Method Tampering vulnerability discovered by Sanjorn Keeratirungsan in WordPress Plugin FluentCart versions 1.4.0...

CVE-2025-13495

The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-13495

The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

EUVD-2025-200728

The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

WordPress plugin FluentCart SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...

WordPress FluentCart A New Era of eCommerce plugin <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'groupKey' Parameter vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin FluentCart versions = 1.3.1...