3.7
Faible
CVE-2026-14927 The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership…
Description
The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership check before rendering customer order documents keyed on a sequential numeric identifier, allowing unauthenticated visitors to enumerate and disclose customer personal data (names, email addresses, billing and shipping postal addresses, and order details) across the store.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FluentCart A New Era of eCommerce 1.5 | premières → < 1.5.3 | 1.5.3 |
Autres CVE de FluentCart A New Era of eCommerce
Les 4 CVE de FluentCart A New Era of eCommerce →
CVE-2026-100142
The FluentCart A New Era of eCommerce WordPress plugin before 2.2.0 does not verify that a stored customer address…
5.3
Moyenne
CVE-2026-100143
The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest…
6.5
Moyenne
CVE-2026-14926
The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a subscription belongs to…
4.2
Moyenne