Read the docs
TI-2026-85907 Aliases CVE-2026-115431GHSA-gr8c-p57r-3wqj

WordPress Upsell Order Bump Offer for WooCommerce plugin Broken Access Control

Priority LOW 31CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

Missing Authorization (CWE-862) in the WP Swings Upsell Order Bump Offer for WooCommerce plugin allows exploitation of incorrectly configured access control. The flaw affects versions from n/a through 3.1.6. The CVSS 3.1 base score is 7.1 (HIGH), with network attack vector and low privileges required. CISA has not added it to the KEV catalog.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Missing Authorization vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through 3.1.6.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00238 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
WP SwingsUpsell Order Bump Offer for WooCommerceup to 3.1.6—No fix listedCNA
  • Upsell Order Bump Offer for WooCommerce VendorWP Swings Affected up to 3.1.6 Fixed in — No fix listed CNA

Remediation

No fixed version is listed for this plugin as of publication on 2026-11-06. Users of version 3.1.6 and earlier should check with the vendor, WP Swings, for an update.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Timeline

  1. 2026-11-06 Threatist record created from CVE-2026-115431
  2. 2026-11-06 CISA SSVC decision points changed
  3. 2026-11-06 Priority changed: MEDIUM → LOW
  4. 2026-11-06 Alias added: GHSA-gr8c-p57r-3wqj

References

Other 1

  • TI-2022-04023 Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload CVSS 3.1CRITICAL 9.8
  • TI-2022-03713 Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload CVSS 3.1CRITICAL 9.8
  • TI-2022-03957 PDF Generator for WordPress < 1.1.2 - Reflected XSS CVSS 3.1MEDIUM 6.1
  • TI-2024-07810 WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload CVSS 3.1CRITICAL 9.8
  • TI-2022-04044 Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF CVSS 3.1MEDIUM 4.3
  • TI-2025-05629 Unrestricted file upload in WP Swings WooCommerce Refund And Exchange with RMA - Warranty… CVSS 3.1CRITICAL 9.8
See all 57 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences