FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler Security & Risk Analysis

The security posture of fluent-cart v1.3.15 presents a mixed bag of good practices and notable concerns. While the plugin demonstrates a strong effort in using prepared statements for SQL queries and proper output escaping, the significant number of unprotected AJAX handlers (13 out of 17) creates a substantial attack surface. The presence of the dangerous `exec` function, even if not flagged by taint analysis in this specific version, warrants caution due to its potential for command injection. The vulnerability history, with past high and medium severity issues like Cross-Site Scripting and SQL Injection, suggests a pattern of input validation weaknesses that may not be fully addressed. The last reported vulnerability in 2026 indicates a relatively recent history of issues, which is concerning given the number of unprotected entry points.