Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #9

FluentCart WordPress plugin patched over guest checkout flaw

Original: 🚨 EUVD-2026-89640 📊 Score: n/a 📦 Product: FluentCart A New Era of eCommerce 🏢 Vendor: Unknown 📅 Updated: 2026-09-30 📝 Th

A vulnerability tracked as EUVD-2026-89640 affects the FluentCart eCommerce plugin for WordPress in versions before 1.6.5. The flaw allows a guest checkout to proceed without verifying that the buyer actually controls the email address entered, which could enable orders or account activity tied to addresses the buyer does not own. Users are advised to update to version 1.6.5 or later. No severity score has been assigned yet and the vendor is unlisted in the advisory.

Why now: A newly published vulnerability advisory affects a widely used WordPress eCommerce plugin, prompting store owners to check and update their installations.

FluentCartWordPressEUVD-2026-89640

Open on mastodon →

Evidence

• 🚨 EUVD-2026-89640 📊 Score: n/a 📦 Product: FluentCart A New Era of eCommerce 🏢 Vendor: Unknown 📅 Updated: 2026-09-30 📝 The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest checkout controls the email address… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/456426