flycart UpsellWP

• CVE-2026-32459 High 7.6 WordPress UpsellWP plugin <= 2.2.4 - SQL Injection vulnerability 0.2%
• CVE-2026-25419 Medium 4.3 WordPress UpsellWP plugin <= 2.2.5 - Broken Access Control vulnerability 0.2%