flycart
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Discount Rules for WooCommerce | 2 | – | Oct 16, 2024 |
| UpsellWP | 2 | – | Mar 13, 2026 |
Exploited and recent CVEs
- CVE-2026-32459 WordPress UpsellWP plugin <= 2.2.4 - SQL Injection vulnerability 0.2%
- CVE-2026-25419 WordPress UpsellWP plugin <= 2.2.5 - Broken Access Control vulnerability 0.2%
- CVE-2020-36834 Discount Rules for WooCommerce <= 2.0.2 - Missing Authorization 0.4%
- CVE-2024-8541 Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons <= 2.6.5 - Reflected Cross-Site Scripting 0.4%