Veille CVE

Recherche « Unknown FluentCart A New Era of eCommerce »

4 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown FluentCart A New Era of eCommerce » ✕
  1. CVE-2026-100142 5.3 Moyenne

    Unknown FluentCart A New Era of eCommerce

    The FluentCart A New Era of eCommerce WordPress plugin before 2.2.0 does not verify that a stored customer address selected during checkout belongs to the requester, allowing unauthenticated attackers to attach any customer's stored address to an order they place and read it back, disclosing customers' postal addresses, phone numbers and company details.

  2. CVE-2026-100143 6.5 Moyenne

    Unknown FluentCart A New Era of eCommerce

    The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest checkout controls the email address supplied, allowing unauthenticated attackers who know an existing guest customer's email to obtain a logged-in account bearing that address together with the customer's stored record.

  3. CVE-2026-14927 3.7 Faible

    Unknown FluentCart A New Era of eCommerce

    The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership check before rendering customer order documents keyed on a sequential numeric identifier, allowing unauthenticated visitors to enumerate and disclose customer personal data (names, email addresses, billing and shipping postal addresses, and order details) across the store.

  4. CVE-2026-14926 4.2 Moyenne

    Unknown FluentCart A New Era of eCommerce

    The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a subscription belongs to the requesting customer in several of its payment-method endpoints, allowing any authenticated customer to act on another customer's subscription (changing its payment method, or cancelling and re-binding it) when they know the target subscription identifier.