Known vulnerabilities in WP Swings Upsell Order Bump Offer for WooCommerce
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-115431 | WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability | 7.1 High | Nov 6, 2026 |
| CVE-2026-116409 | WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability | 7.1 High | Oct 29, 2026 |
| CVE-2026-81288 | Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions | 7.1 High | Sep 2, 2026 |
| CVE-2026-49110 | Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions | 7.5 High | Jun 15, 2026 |
| CVE-2025-59565 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell… | 6.5 Medium | Sep 22, 2025 |
Other WP Swings products
Wallet System for WooCommerce 7
Membership For WooCommerce 5
Points and Rewards for WooCommerce 3
Coupon Referral Program 2
Event Tickets Manager for WooCommerce 2
Gift Cards for WooCommerce Pro 2
PDF Generator for WordPress 2
Subscriptions for WooCommerce 2
Ultimate Gift Cards For WooCommerce 2
Return Refund and Exchange For WooCommerce 1
WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet 1
WooCommerce Ultimate Gift Card 1