Description
Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP Swings | Upsell Order Bump Offer for WooCommerce | ≤ 3.1.4 | — |
High · 7.5
CVE-2026-49110
EUVD-2026-36885GHSA-cp3w-qhjm-4333
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack