CVE-2026-100143

Name of the Vulnerable Software and Affected Versions FluentCart A New Era of eCommerce WordPress plugin versions prior to 1.6.5

Description The plugin fails to verify if the individual performing a guest checkout actually controls the provided email address. This allows unauthenticated attackers who possess a known guest customer email to gain access to a logged-in account associated with that address, including the customer's stored records.

Recommendations Update the plugin to version 1.6.5 or later.