Security Advisory

CVE-2026-25419

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-19 08:27:06

Last updated 2026-04-28 16:14:58

Assigner Patchstack

State PUBLISHED

Description

Missing Authorization vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UpsellWP: from n/a through <= 2.2.5.

← Browse all CVEs View on cve.org ↗