Plugin icon

StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce

storegrowth-sales-booster

Vulnerabilities:

4

Last Updated:

August 19, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-08-10
Title
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce <= 2.1.1 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2026-07-27
Title
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart < 2.1.1 - Unauthenticated Stored Cross-Site Scripting via 'message_popup' Parameter
Fixed in
Fixed in 2.1.1
CVSS
7.2 (high)
Published
2026-07-27
Title
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart < 2.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action
Fixed in
Fixed in 2.1.1
CVSS
5.3 (medium)
Published
2026-07-27
Title
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart < 2.1.1 - Missing Authorization to Unauthenticated Options Update via create_popup AJAX Action
Fixed in
Fixed in 2.1.1
CVSS
5.3 (medium)