Skip to content
OpenAdvisories

Vendor

flycart

4 known vulnerabilities.

Products

Discount Rules for WooCommerce 2 UpsellWP 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-25419

    WordPress UpsellWP plugin <= 2.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UpsellWP: from n/a through <= 2.2.5.

    flycart UpsellWP
  • Medium 6.3
    CVE-2020-36834

    Discount Rules for WooCommerce <= 2.0.2 - Missing Authorization

    The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions in versions up to, and including, 2.0.2 due to missing capability checks on various functions. This makes it possible for subscriber-level …

    flycart Discount Rules for WooCommerce Web / CMS
  • Medium 4.7
    CVE-2024-8541

    Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons <= 2.6.5 - Reflected Cross-Site Scripting

    The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all …

    flycart Discount Rules for WooCommerce Web / CMS