CVE-2026-116409

ALTO 7.1CVE-2026-116409 · Published 29/10/2026 · updated 29/10/2026

En resumen

CVE-2026-116409 es una vulnerabilidad ALTO (CVSS 7.1).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.19%, mayor que el 8.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Reflected XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through 3.1.6.

References

patchstack.com/database/wordpress/plugin/upsell-order-bump-offer-for-woocommerce/vulnerability/wordpress-upsell-order-bump-offer-for-woocommerce-plugin-3-1-6-cross-site-scripting-xss-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free