CVE-2026-120577 - FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter
CVE ID :CVE-2026-120577 Published : Nov. 3, 2026, 5:18 a.m. | 1 hour, 45 minutes ago Description :The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFile...