WordPress plugin
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium4
- Low0
All StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤2.0.6Update to 2.1.1 | CVE-2026-39750 | |
| Medium5.3 | Unauthenticated Arbitrary Price Manipulation <2.1.2Update to 2.1.2 | CVE-2026-78137 | |
| Medium5.3 | Missing Authorization ≤2.1.1Update to 2.1.2 | CVE-2026-66466 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'message_popup' Parameter ≤2.1.0Update to 2.1.1 | CVE-2026-13440 | |
| Medium5.3 | Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action ≤2.1.0Update to 2.1.1 | CVE-2026-13110 | |
| Medium5.3 | Missing Authorization to Unauthenticated Options Update via create_popup AJAX Action ≤2.1.0Update to 2.1.1 | CVE-2026-15411 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤2.0.6Update to 2.1.1
- Medium5.3Unauthenticated Arbitrary Price Manipulation
<2.1.2Update to 2.1.2
- Medium5.3Missing Authorization
≤2.1.1Update to 2.1.2
- High7.2Unauthenticated Stored Cross-Site Scripting via 'message_popup' Parameter
≤2.1.0Update to 2.1.1
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action
≤2.1.0Update to 2.1.1
- Medium5.3Missing Authorization to Unauthenticated Options Update via create_popup AJAX Action
≤2.1.0Update to 2.1.1
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce: common questions
Does StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce: 2 high, 4 medium. None are known to affect version null.
How do I check which version of StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce vulnerability?
CVE-2026-39750, published Oct 5, 2026: StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce vulnerability listed in CISA KEV?
No. None of the known StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.