Low severity3.7NVD Advisory· Published Jul 31, 2026· Updated Aug 26, 2026
CVE-2026-14927
CVE-2026-14927
Description
The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership check before rendering customer order documents keyed on a sequential numeric identifier, allowing unauthenticated visitors to enumerate and disclose customer personal data (names, email addresses, billing and shipping postal addresses, and order details) across the store.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.5.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.