StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: wedevs

CVE ID	Title	CVSS	Severity	Published
CVE-2026-15411	StoreGrowth: Smart Sales Booster for WooCommerce \| BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Options Update via create_popup AJAX Action CWE-862	5.3	Medium	2026-07-28
CVE-2026-13110	StoreGrowth: Smart Sales Booster for WooCommerce \| BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action CWE-862	5.3	Medium	2026-07-28
CVE-2026-13440	StoreGrowth: Smart Sales Booster for WooCommerce \| BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting via 'message_popup' Parameter CWE-79	7.2	High	2026-07-28

All 3 known CVE vulnerabilities affecting StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce with full Chinese analysis, references, and POCs where available.