Checkout Upsell – WooCommerce Upsell, Cross Sell, Order Bumps, One Click Upsell, Frequently Bought Together, Next Order C, CVE-2026-25419

CVE, Research URL: CVE-2026-25419
Home page URL: Security reports for Checkout Upsell – WooCommerce Upsell, Cross Sell, Order Bumps, One Click Upsell, Frequently Bought Together, Next Order C
Application: Checkout Upsell – WooCommerce Upsell, Cross Sell, Order Bumps, One Click Upsell, Frequently Bought Together, Next Order C
Published on: Feb 19, 2026
Research Description: Missing Authorization vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UpsellWP: from n/a through <= 2.2.3.
Affected versions: max 2.2.3.
Status: vulnerable

Checkout Upsell &#8211; WooCommerce Upsell, Cross Sell, Order Bumps, One Click Upsell, Frequently Bought Together, Next Order C, CVE-2026-25419