Plugin icon

UpsellWP – Upsell and Related Products Offers for WooCommerce

checkout-upsell-and-order-bumps

Vulnerabilities:

3

Last Updated:

September 15, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-09-16
Title
UpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together
Fixed in
Fixed in 2.2.10
CVSS
5.3 (medium)
Published
2026-03-14
Title
UpsellWP – WooCommerce Upsell and Related Products Offers < 2.2.5 - Authenticated (Shop manager+) SQL Injection
Fixed in
Fixed in 2.2.5
CVSS
4.9 (medium)
Published
2026-01-28
Title
UpsellWP < 2.2.6 - Missing Authorization
Fixed in
Fixed in 2.2.6
CVSS
4.3 (medium)