CVE-2026-85350 | UpsellWP Plugin up to 2.2.9 on WordPress improper authentication

September 18, 2026 Yanac

A vulnerability was found in UpsellWP Plugin up to 2.2.9 on WordPress. It has been rated as problematic. Affected is an unknown function. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-85350. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More