Advisories · Technology
wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler.
Every CVE that names wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter
- wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
- Path traversal
- CVSS 7.5 High
FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters
- wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
- Broken access control
- CVSS 4.9 Medium
FluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys
- wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
- SQL injection
- CVSS 4.9 Medium
FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter
- wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
- SQL injection