CVE-2026-81288

The Upsell Order Bump Offer for WooCommerce versions up to 3.1.5 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts that could compromise user data or session integrity. This high-severity vulnerability should be prioritized by WooCommerce site administrators and developers to mitigate potential exploitation risks. Immediate updates or patches are recommended to safeguard against this threat.