Upsell Order Bump Offer for WooCommerce vulnerabilities

Product

Upsell Order Bump Offer for WooCommerce

by WP Swings · last CVE Sep 2, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 1Low 0

Severity

Exploitation

Watch

Add Upsell Order Bump Offer for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-49110	7.5	0%	Jun 15	WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability Affected: through 3.1.4
CVE-2026-81288	7.1	0%	Sep 2	WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability Affected: through 3.1.5