Approved changes feed: RSS · Atom

cpe:2.3:a:wp_swings:upsell_order_bump_offer_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWp Swings (fba6bb4b-34c3-528e-b86d-0cd563571506)
ProductUpsell Order Bump Offer For Woocommerce (b20ea8f5-c95b-5d48-b947-e5cd42c3a3a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59565 vulnerable 2026-06-08 07:35:22.353110 WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Stored XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through <= 3.0.7.
Published: 2025-09-22T18:26:01.225Z
Updated: 2026-04-28T16:13:52.513Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.