Brainstorm Force CartFlows

• CVE-2026-120853 Medium 5.3 WordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerability –
• CVE-2026-120852 Medium 5.3 WordPress CartFlows plugin <= 3.3.0 - Content Injection vulnerability –
• CVE-2026-96837 High 8.8 WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability 0.5%
• CVE-2026-39477 Medium 4.3 WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability 0.2%
• CVE-2026-25316 High 7.2 WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability 0.4%