FluentCart

A vulnerability tracked as EUVD-2026-89640 affects the FluentCart eCommerce plugin for WordPress in versions before 1.6.5. The flaw allows a guest checkout to proceed without verifying that the buyer actually controls the email address entered, which could enable orders or account activity tied to addresses the buyer does not own. Users are advised to update to version 1.6.5 or later. No severity score has been assigned yet and the vendor is unlisted in the advisory.