WPManageNinja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
CVE-2026-120577High 8.1FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter0.6%
CVE-2026-103525High 7.5FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters0.4%
CVE-2026-103518Medium 4.9FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys0.4%
CVE-2025-13495Medium 4.9FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter0.3%