Wp Swings Upsell Order Bump Offer For Woocommerce
3 CVEs affecting Wp Swings Upsell Order Bump Offer For Woocommerce. Latest disclosed: 2026-09-02. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-49110 | High | 7.5 | 2026-06-15 | Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions. |
CVE-2026-81288 | High | 7.1 | 2026-09-02 | Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions. |
CVE-2025-59565 | Medium | 6.5 | 2025-09-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-… |