Vendor

WP Swings

1 brief RSS

WP Swings Upsell Order Bump Offer for WooCommerce: Reflected Cross-site Scripting (CVE-2026-116409)

A reflected cross-site scripting vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce (versions <= 3.1.6) allows attackers to execute arbitrary scripts in a user's browser via crafted input.

Upsell Order Bump Offer for WooCommerce xss web-application wordpress vulnerability

1t 1c 2h ago