{"id":40296,"date":"2026-10-16T16:33:00","date_gmt":"2026-10-16T08:33:00","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-103525"},"modified":"2026-10-16T16:33:00","modified_gmt":"2026-10-16T08:33:00","slug":"cve-2026-103525","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-103525","title":{"rendered":"CVE-2026-103525 [HIGH] &#8211; The FluentCart A New Era of eCommerce \u2013 Faster, Lighter, and Simpler plugin for WordPress"},"content":{"rendered":"<p>The FluentCart A New Era of eCommerce \u2013 Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the &#8216;order_id + billing_address_id (also shipping_address_id)&#8217; parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read and exfiltrate another customer&#8217;s stored billing and shipping address PII \u2014 including street address, city, state, postcode, phone number, company name, VAT number, and legal registration ID \u2014 by enumerating sequential AUTO_INCREMENT order and address ID pairs. The id-equality guard intended to restrict address reuse is bypassed because the attacker controls both halves of the compared pair, and the unauthenticated AJAX entry point imposes only a soft rate limit of 5 requests per 60 seconds rather than any authentication or ownership check.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The FluentCart A New Era of eCommerce \u2013 Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the &#8216;order_i<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-40296","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/40296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=40296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=40296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=40296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}