FluentCart < 1.4.0 IDOR Vulnerability: Subscriber Subscription Payment-Method Tampering

wpscan.com 2026-07-28查看中文 →

Security AdvisoryCVE-2026-14926MediumFluentCart

Affected:

fluent-cart < 1.4.0

Fixed in:

1.4.0

Referenced CVEs: CVE-2026-14926

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Ninja Forms < 3.14.10 Unauthenticated Arbitrary Shortcode Execution via Query String (CVE-2026-15256) 2026-08-07 WP Hotel Booking <2.3.2 Unauthenticated PayPal Payment Bypass (CVE-2026-15152) 2026-08-07 WordPress Five Star Restaurant Reservations <2.7.23 Unauthenticated Payment Bypass via IDOR (CVE-2026-15147) 2026-08-07 RegistrationMagic < 6.0.9.5 Unauthenticated Payment Bypass via Amount-Blind PayPal Verification (CVE-2026-15208) 2026-08-07 WP Hotel Booking <2.3.3 Unauthenticated Price Manipulation Payment Bypass 2026-08-07

Offline Archive

Offline screenshot & PDF are Pro-exclusive