Radar sectionsPlugins & themes
Check my site

WordPress plugin

UpsellWP – Upsell and Related Products Offers for WooCommerce security & vulnerabilities

checkout-upsell-and-order-bumps— active installsLast vulnerability Sep 16, 2026

No known unpatched vulnerabilities in the latest version

All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

3Known vulnerabilities
  • Critical0
  • High0
  • Medium3
  • Low0
Vulnerabilities per year
2026: 3 vulnerabilities326

All UpsellWP – Upsell and Related Products Offers for WooCommerce vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

UpsellWP – Upsell and Related Products Offers for WooCommerce: common questions

Does UpsellWP – Upsell and Related Products Offers for WooCommerce have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in UpsellWP – Upsell and Related Products Offers for WooCommerce: 3 medium. None are known to affect version null.

How do I check which version of UpsellWP – Upsell and Related Products Offers for WooCommerce I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent UpsellWP – Upsell and Related Products Offers for WooCommerce vulnerability?

CVE-2026-85350, published Sep 16, 2026: UpsellWP <= 2.2.9 - Unauthenticated Payment Bypass. Severity: Medium (CVSS 5.3).

Is any UpsellWP – Upsell and Related Products Offers for WooCommerce vulnerability listed in CISA KEV?

No. None of the known UpsellWP – Upsell and Related Products Offers for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?