CVE-2026-120577

The FluentCart WordPress plugin (all versions up to and including 1.6.2 ) is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFile function. Authenticated attackers with custom-level access and above can exploit this to delete arbitrary files on the serv...