Unknown Fast Courier

• CVE-2026-89288 High 8.6 Fast Courier 5.0.0 - 5.2.3 - Unauthenticated SQLi via 'wp_order_id' Parameter 0.3%
• CVE-2026-89289 Medium 5.3 Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint 0.2%