Skip to content
OpenAdvisories

Vendor

flycart

4 known vulnerabilities.

Products

Discount Rules for WooCommerce 2 UpsellWP 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-32459

    WordPress UpsellWP plugin <= 2.2.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Blind SQL Injection.This issue affects UpsellWP: from n/a through <= 2.2.4.

    flycart UpsellWP