Upsell Order Bump Offer for WooCommerce vulnerabilities

2 known vulnerabilities in Upsell Order Bump Offer for WooCommerce from WP Swings. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Upsell Order Bump Offer for WooCommerce: Missing Authorization

  CVE-2026-115431Nov 6, 2026WP Swings

  Missing Authorization vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Upsell Order Bump Offer for WooCommerce:

• 7.1 High severity

  Upsell Order Bump Offer for WooCommerce: Improper Neutralization of Input During Web Page Generation

  CVE-2026-116409Oct 29, 2026WP Swings

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Reflected XSS.This issue affects Upsell Order Bump Offer for