FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 10 are fixed as of October 2026. Their average CVSS score is 6.0, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 4 high. 2026 was the busiest year with 9 disclosures.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 3 of the records (30%). Other recurring categories include SQL Injection, Cross-Site Scripting.
Every one of the 10 issues recorded for FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler has a vendor fix available, so running the current release closes all known holes.
7 independent researchers contributed these findings, most of them (3) reported by Wordfence PRISM. FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler is installed on roughly 9,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter
Read the full analysisVulnerability Records

FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
Author
WPManageNinja
Meet FluentCart. It’s a performance-first, self-hosted eCommerce plugin for WordPress. Build your online store, whether you sell physical products, subscriptions, digital downloads, software licenses, or all of them. No third-party dependencies, no platform lock-in, and no transaction fees. Just a powerful checkout and store online store builder purpose built for fast growth. FluentCart is a complete online store plugin and store builder in one. Create products, design your storefront, run a fast checkout, accept payments, and manage orders, customers, subscriptions, and licenses from a single dashboard. 🔗 Official Website Link: Official Website 🔗 Join Our Community: FluentCart Community 🔗 Official 5 Minutes Guide: Getting started with FluentCart Built from the ground up with flexibility, performance, and long-term scalability in mind, this isn’t a fork of existing plugins. This is a fresh take on what a WordPress store builder should be: lean, powerful, and completely under your control. FluentCart adapts to your model without adding bloat or locking you into a SaaS fee structure. FluentCart is ideal for solo creators, growing businesses, and developers building client stores. If you’re tired of overcomplicated dashboards and bloated add-ons, this is your answer. Forget about transaction fees, because FluentCart charges exactly 0 transaction fees on payments processed through both Free and Pro installations. FluentCart is for you if you’re looking to free yourself from rigid checkout builders or, vendor lock-ins. Run your store with clarity and confidence, whether you sell ebooks, handmade goods, software licenses, or monthly product bundles. Sales Models: Consumer goods, Subscriptions, Digital Downloads & Licensing FluentCart supports a variety of sales models, all in the same store. Offer one-time products or digital downloads, manage subscriptions with flexible billing intervals and free trials, add setup fees or installment plans, bundle products together, and issue time-limited software licenses. You can mix and match hybrid product types without relying on third-party add-ons. Best for Subscription goods Gated downloads Licensed software Book stores B2B catalogs Maintenance services Tiered subscriptions Digital file hosting Software distribution Membership access Fashion stores Course Websites Grocery Shop Agro Catalogs Agency services Features List by Category Everything below is included in the free eCommerce plugin unless it is marked (Pro) or (Addon). Product & Catalog Management Physical & Digital Products – Sell shipped goods and digital products from the same store Simple Products – Create one-time purchasable items with fixed pricing Variable Products – Offer products with multiple attributes (e.g. size, license type) Advanced Variations – Manage variations with reusable attributes and option sets, each with its own pricing and SKU Product Bundles (Pro) – Sell multiple products together as a single bundle Subscriptions – Configure recurring products with billing intervals and durations (No Transaction Fees) Free Trials – Offer trial periods before the first subscription payment Installments (Pro) – Support split payments over time for high-ticket items, with early installment payments Setup Fees – Add one-time setup charges on top of recurring payments Product Categories – Organize products for easier navigation and filtering Product Labels – Tag products for promotional badges (e.g. “New”, “Popular”) Product Images & Galleries – Showcase every product and variation with image galleries SKU Management – Assign and track SKUs across products and variations Product Duplication – Clone existing products to launch new ones faster Bulk Product Insert & Update – Add or edit products in bulk Draft & Published Products – Prepare products privately before they go live Digital Downloads & Software Licensing Downloadable Files – Securely attach files to digital products Secure Download Delivery – Grant purchase-based download access to customers Amazon S3 Storage – Store and deliver digital downloads from Amazon S3 Cloudflare R2 Storage (Pro) – Connect R2 buckets to upload, browse, and deliver files Licensing Support (Pro) – Attach license keys to products and define expiry rules License Activation API (Pro) – Activate, deactivate, and validate license keys with activation limits License Renewals (Pro) – Renew licenses and track activated sites Licensed Downloads (Pro) – Deliver software updates and downloads only to valid license holders Customer License Management (Pro) – Let customers view and manage their licenses Checkout & Payments One-Click Checkout – Optimized checkout experience for faster conversions Modal Checkout – Let customers check out in a popup without leaving the page Mini Cart & Cart Drawer – Keep the cart one click away on every page Buy Now & Add to Cart – Send customers straight to checkout or let them keep shopping Guest Checkout – Accept orders with or without a customer account Checkout Field Customization – Add, edit, and validate checkout fields Order Payment Links – Send customers a direct link to pay for an order Custom Payment Gateways – Add or extend gateways using hooks and filters Stripe Integration – Fully-featured Stripe payments with no extra plugins PayPal Integration – Built-in PayPal support with easy configuration Manual Gateway – Accept Cash on delivery Pro Payment Gateways (Pro) – Accept payments with Paddle, Mollie, and Authorize.Net Saved Payment Methods (Pro) – Let customers save and reuse supported cards and PayPal accounts Multi-Currency (Pro) – Sell in multiple currencies with a currency switcher, cart repricing, and daily ECB exchange rates Failed Renewal Handling (Pro) – Automatic retry logic for subscription renewals Plan Upgrades & Prorated Charges (Pro) – Handle subscription upgrades and bill customers proportionally for changes Coupon Support – Enable discounts, promos, and launch offers via coupons with usage limits and product rules Sales & Conversion Tools Order Bumps (Pro) – Show discounted upgrades and add-on offers at checkout, with promotion statistics Dynamic Pricing (Pro) – Apply conditional discounts and fees based on product, customer, coupon, user role, or payment method On-page Checkout Form (Pro) – Let customers choose a product or plan and pay directly on landing pages Customer & Subscription Management Customer Profiles – View and manage full purchase history and subscriptions Customer Notes – Add internal notes visible only to store admins Customer Dashboard – Give customers a self-service account for orders, downloads, and subscriptions Subscription Dashboard – Let users manage billing, pause/cancel subscriptions Store-Managed Renewals – Create renewal invoices and collect renewal payments with payment links Renewal Reminders – Notify customers before subscriptions renew Support Dashboard Integration – Pull customer history into Fluent Support Automated Notifications – Send email alerts for purchase, renewal, and failures, plus marketing automations with FluentCRM Product Reviews & Ratings Product Reviews & Star Ratings – Collect native product reviews with star ratings Verified-Buyer Reviews – Restrict reviews to customers and show verified-purchase badges Review Moderation – Approve reviews manually or automatically Store Replies – Reply to each review from your store Photo Reviews (Pro) – Let customers upload photos with their reviews Helpful Votes (Pro) – Let shoppers vote reviews as helpful or not helpful Threaded Replies (Pro) – Allow multiple replies and customer conversations on reviews Review Layouts (Pro) – Display reviews in grid, slider, or masonry layouts Analytics, Marketing & Growth Reports Overview – Track order volume, Revenue by Quarter, Revenue by Country Sales Reporting – Track order volume, most sold products and variants, Customer LTV, and more Order Analytics – Average order value, order items, order heatmap, orders by country, and more Revenue Analytics – Net revenue sorted by Time, Country, and Payment Gateway Refund Analytics – Total refunds, Avg. Refund value, Refund Rate, Filter by Country, Payment method, and Intervals Product Data – Top performing products, Product Performance over time Subscriptions Report – Subscription performance, renewals, and churn over time Customer Data – Top customers and customer performance over time Advanced Filtering (Pro) – Custom date ranges for tracking beyond the last month of data Advanced Search & Saved Views (Pro) – Build multi-condition AND/OR filters and save them as views Data Exports (Pro) – Export the current page, selected records, filtered results, or all records Accounting & OSS Exports (Pro) – Export accounting-ready and OSS-oriented reports Performance & Developer Experience Custom Database Schema – Built for speed, not tied to WordPress post tables Lightweight Architecture – Minimal plugin bloat and clean dependency footprint Custom Endpoints – Extend customer dashboard or checkout with new features Full REST API – Access product, customer, and order data programmatically Action & Filter Hooks – Modify behavior across store logic Block-based Components – Gutenberg-ready interface for checkout and forms Shortcodes – Place store and checkout components anywhere Headless Ready – Serve as backend for mobile/web apps and Jamstack frontends WP-CLI Commands – Manage your store from the command line MCP & AI Integration – Connect AI tools to query and manage store data WooCommerce Migration – Move products, customers, and orders from WooCommerce Webhooks (Pro) – Send store events to any external service Admin & Store Operations Order Management – View, filter, and update orders directly from dashboard Inventory Tracking – Track stock levels and automatically disable out-of-stock items Advanced Inventory (Pro) – Make stock adjustments and review adjustment history Tax – Handle Global and EU Tax with custom Tax classes, inclusive/exclusive pricing, and shipping tax Shipping – Manage shipping zones, classes, and custom methods Refund Tools – Process manual or automatic refunds (gateway-dependent) User Role Management (Pro) – Assign operational access with granular store permissions Storewide Settings – Control pricing formats, currency, etc. Global Store Search – Find products, orders, customers, subscriptions, and coupons instantly Receipts – Generate printable receipts for every order Store Digest – Get regular store summaries by email Custom Email Templates (Pro) – Send branded, block-based emails for purchase events PDF Invoices & E-Invoices (Pro) – Send branded PDF invoices with a visual template editor and ZUGFeRD/Factur-X support eCommerce for Developers FluentCart was built by developers who understand the pain of working with rigid eCommerce systems. Its architecture is entirely action and filter-driven, letting you override, extend, or customize anything without hacks or fragile workarounds. All data is stored in dedicated database tables for performance and portability. We’ve optimized the queries so Orders can be processed 3X faster compared to the market leader. On top of that we’ve built FluentCart for complete programmatic control. REST API endpoints are available for all key resources. Due to this the frontend can be completely decoupled with technology like Vue and Alpine. WP-CLI commands and MCP tools give you even more ways to automate your store. Whether you’re building custom apps on top of FluentCart or creating complex checkout flows, this plugin is built to stay out of your way and give you the keys. Store Builder: Customization and Design No more fighting layouts. Style your cart, checkout, and product pages exactly how you want using your theme, no forced stylesheets or layout overrides. Customize every part of the experience: product card components, variation pickers, quantity selectors, checkout forms, and thank-you pages. All templates are overrideable. Whether you’re designing high-converting sales funnels or frictionless repeat purchase flows, FluentCart is built for modern storefront aesthetics. You can set store branding with global customizations as soon as you setup FluentCart. The responsive blocks act as standard Gutenberg blocks so your store doesn’t break under any circumstances, even on mobile. Moreover, you get direct compatibility with popular store themes along with page builders like Elementor and Bricks Builder. If you need even more customizability, the option to use advanced CSS is also available to give you complete design control. Blocks Product Grid Search Bar Customer Dashboard Check out Product Cards Product Gallery Product Info Buy Section Available Stock Business Growth FluentCart includes tools that help you operate at scale. From revenue analysis to team coordination, it comes with every operational tool pre-integrated, so you don’t need workarounds or extra plugins to manage growth. Reports You get detailed breakdowns of subscriptions, refunds, and subscriber churn rates. Filter performance by product, category, date range, to evaluate the ROI of every sale. With Pro, you can export your data and accounting reports whenever you need them. Comprehensive Payment Gateways Payments are at the heart of eCommerce. FluentCart handles automatic retry logic on failed subscription renewals, supports prorated charges for mid-cycle upgrades or plan changes, and lets you offer installment payments—all without custom coding or third-party checkout tools. You can switch gateways, track payment history, and automate invoicing with ease. With Pro, customers can save their payment methods and pay in their own currency. This makes FluentCart more than just a store plugin. It’s your dedicated checkout engine and payment hub. Sales Grow your average order value with the sales tools built into checkout. Coupons are included for free, and Pro adds order bumps, dynamic pricing rules, and inline checkout for landing pages, so you don’t need a separate sales plugin. Access Control User Role management means you can safely scale your internal team too. Grant access to team members based on function. Everything is role-based, compartmentalized, and securely accessible from the backend. Every feature is tightly integrated, so your operational data flows through one system. No external dashboards. No syncing delays. Just live, accurate, and usable insight to help you grow smarter. Reinventing eCommerce Building online stores on WordPress has been riddled with slow queries, bloated schemas, bloated add-ons, and unscalable databases that make your store feel sluggish as it grows. SaaS platforms offload those problems by locking you into hosted environments, but charge you platform fees, gateway markups, and provide exactly zero control over your backend. At its core, FluentCart is the sales plugin that runs on a custom database schema purpose-built for digital and subscription commerce. No legacy baggage. It uses fast, indexed tables that prioritize the read/write operations that matter most for modern stores such as, orders, customers, products, subscriptions, licenses, and transactions. This keeps your store snappy even under load, without relying on caching hacks or third-party optimizers. All data is structured for scalability. Whether you’re handling 50 or 50,000 orders, FluentCart maintains consistent performance with predictable query logic. No degrading response times as tables balloon, no complex migration paths when scaling up, and no reliance on external APIs to run day-to-day operations. And while most store plugins make you pay for scale, whether through add-on upsells, platform commissions, or percentage-based transaction fees, FluentCart is truly self-hosted and pro-ownership. You pay once. You own it. There are zero transaction fees, no enforced usage tiers, and no hidden charges from payment providers. You can integrate Stripe, PayPal, local gateways, or your own custom processor using native hooks without ever sharing a cut. Data Privacy Your data stays where it belongs, on your server. FluentCart does not phone …
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C