CVE-2026-14927

CVE-2026-14927 affects the FluentCart WordPress plugin (before 1.5.3). It lacks authorization/ownership checks when rendering order documents identified by a sequential numeric ID, allowing unauthenticated visitors to enumerate and disclose customers’ PII (names, emails, billing/shipping addresse...