fluentcart_a_new_era_of_ecommerce vulnerabilities
CVEs whose affected-version data names the fluentcart_a_new_era_of_ecommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-100142Medium· 5.3FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR
The FluentCart A New Era of eCommerce WordPress plugin before 2.2.0 does not verify that a stored customer address selected during checkout belongs to the requester, allowing unauthenticated attackers to attach any customer's stored add…
▾ SunlitEPSS 0.30%via CVEORG
CVE-2026-100143Medium· 6.5The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest checkout controls the email address supplied, allowing unauthenticated attackers who know an existing guest customer's e…
The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest checkout controls the email address supplied, allowing unauthenticated attackers who know an existing guest customer's e…
▾ SunlitEPSS 0.20%via NVD