CVE-2026-49110 Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions

Description

Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
Upsell Order Bump Offer for WooCommerce 3.1	earliest → 3.1.4	No fix stated

Other CVEs of Upsell Order Bump Offer for WooCommerce

The 5 CVEs of Upsell Order Bump Offer for WooCommerce →

CVE-2026-115431 WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability 7.1 High CVE-2026-116409 WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability 7.1 High CVE-2026-81288 Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions 7.1 High CVE-2025-59565 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell… 6.5 Medium