Description
Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brainstorm Force | CartFlows | ≤ 3.2.0 | — |
High · 8.8
CVE-2026-96837
EUVD-2026-89889GHSA-x4pm-cppj-22vx
WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack