CVE-2026-25419

Publication date

2026-02-19 08:27:06

Family

Patchstack

State

PUBLISHED

Description

Missing Authorization vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UpsellWP: from n/a through <= 2.2.3.