Advisories · Technology

WP Swings Upsell Order Bump Offer for WooCommerce.

Every CVE that names WP Swings Upsell Order Bump Offer for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115431 CVE record

CVSS 7.1 High

WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability
- WP Swings Upsell Order Bump Offer for WooCommerce
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-116409 CVE record

CVSS 7.1 High

WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
- WP Swings Upsell Order Bump Offer for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-81288 CVE record

CVSS 7.1 High

WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
- WP Swings Upsell Order Bump Offer for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2026
CVE-2026-49110 CVE record

CVSS 7.5 High

WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability
- WP Swings Upsell Order Bump Offer for WooCommerce
- CWE-1284
Not analysed yet 15 Jun 2026
CVE-2025-59565 CVE record

CVSS 6.5 Medium

WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability
- WP Swings Upsell Order Bump Offer for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025