FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler vulnerabilities

2 known vulnerabilities in FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler from WPManageNinja. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  FluentCart A New Era of eCommerce – Faster…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-120577Nov 3, 2026WPManageNinja

  The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFile function in all versions up to, and including, 1.6.2. This makes it po

• 7.5 High severity

  FluentCart A New Era of eCommerce – Faster…: Authorization Bypass Through User-Controlled Key

  CVE-2026-103525Oct 16, 2026WPManageNinja

  The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the 'order_id + billing_address_id (also shipping_address_id)' parameter