3.7
Low
CVE-2026-14927 The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership…
Description
The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership check before rendering customer order documents keyed on a sequential numeric identifier, allowing unauthenticated visitors to enumerate and disclose customer personal data (names, email addresses, billing and shipping postal addresses, and order details) across the store.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FluentCart A New Era of eCommerce 1.5 | earliest → < 1.5.3 | 1.5.3 |
Other CVEs of FluentCart A New Era of eCommerce
The 4 CVEs of FluentCart A New Era of eCommerce →
CVE-2026-100142
The FluentCart A New Era of eCommerce WordPress plugin before 2.2.0 does not verify that a stored customer address…
5.3
Medium
CVE-2026-100143
The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest…
6.5
Medium
CVE-2026-14926
The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a subscription belongs to…
4.2
Medium