Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Upsellwp Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-85350 1 Wordpress-extensions 1 Upsellwp 2026-09-29 5.3 Medium
The UpsellWP WordPress plugin before 2.2.10 does not check that products added to the cart through a Frequently Bought Together campaign belong to that campaign, allowing unauthenticated users to buy arbitrary products at the campaign's discounted price.