storegrowth

Security Risk Profile

/100

low

Security Risk Score

Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from July 28, 2026 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

5.9

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

38/100

low

🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

Most Affected Products

1. Storegrowth StoreGrowth: Smart Sales Booster for WooCommerce2

2. StoreGrowth Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart1

Recent Vulnerabilities

See more →

CVE-2026-39750

CVSS 7.1high

WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Oct 6, 2026🔧 No Patch

CVE-2026-13110

CVSS 5.3medium

StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action

Jul 28, 2026🔧 No Patch

CVE-2026-15411