CVE Intelligence

WP Swings Upsell Order Bump Offer for WooCommerce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WP Swings Upsell Order Bump Offer for WooCommerce: 3 record(s), with affected versions and fixes.

CVE-2026-81288 High · 7.1 CWE-79 Sep 2, 2026
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions.
CVE-2026-49110 High · 7.5 CWE-1284 Jun 15, 2026
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability
Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions.
CVE-2025-59565 Medium · 6.5 CWE-79 Sep 22, 2025
WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Stored XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through <= 3.0.7.