Skip to content
OpenAdvisories
High · 7.5 CVE-2026-66466 EUVD-2026-57885GHSA-877h-862m-46jr

WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability

Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack

Vendor: wedevs Product: StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart Category: Web / CMS

Description

Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.1 versions.

Affected products

VendorProductAffectedFixed
weDevs StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart ≤ 2.1.1 —

References