Plugin icon

UpsellWP – Upsell and Related Products Offers for WooCommerce

checkout-upsell-and-order-bumps

Vulnerabilities:

2

Last Updated:

April 30, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-03-14
Title
UpsellWP – WooCommerce Upsell and Related Products Offers < 2.2.5 - Authenticated (Shop manager+) SQL Injection
Fixed in
Fixed in 2.2.5
CVSS
4.9 (medium)
Published
2026-01-28
Title
UpsellWP <= 2.2.3 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)