PT-2026-103021 · WordPress · Fluentcart
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
FluentCart A New Era of eCommerce WordPress plugin versions prior to 1.6.5
Description
The plugin fails to verify if the individual performing a guest checkout actually controls the provided email address. This allows unauthenticated attackers who possess a known guest customer email to gain access to a logged-in account associated with that address, including the customer's stored records.
Recommendations
Update the plugin to version 1.6.5 or later.
Exploit
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Fluentcart