Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
woocommerce-product-addon
WordPress
· Plugin
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter
CVE-2026-104801
woocommerce-product-addon
WordPress
Critical
Fix reported
2026-10-13
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.18 - Missing Authorization
CVE-2026-56050
woocommerce-product-addon
WordPress
Medium
Fix reported
2026-06-29
PPOM for WooCommerce <= 33.0.16 - Missing Authorization
CVE-2025-66069
woocommerce-product-addon
WordPress
Medium
Fix reported
2025-11-25
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL Injection
CVE-2025-11691
woocommerce-product-addon
WordPress
High
Fix reported
2025-10-18
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload
CVE-2025-11391
woocommerce-product-addon
WordPress
Critical
Fix reported
2025-10-18
PPOM for WooCommerce <= 33.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2025-24668
woocommerce-product-addon
WordPress
Medium
Fix reported
2025-01-28
PPOM for WooCommerce <= 32.0.20 - Unauthenticated Content Injection Vulnerability
CVE-2024-35728
woocommerce-product-addon
WordPress
Medium
Fix reported
2024-06-12
Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file
CVE-2024-3962
woocommerce-product-addon
WordPress
Critical
Fix reported
2024-04-26
ThemeIsle SDK <= Various Versions - Missing Authorization
CVE-2024-1047
feedzy-rss-feeds
menu-icons
WordPress
Medium
Fix reported
2024-03-01
PPOM for WooCommerce <= 32.0.6 - Reflected Cross-Site Scripting
CVE-2023-2256
woocommerce-product-addon
WordPress
Medium
Fix reported
2024-01-22
PPOM for WooCommerce <= 18.3 - Authenticated Stored Cross-Site Scripting
CVE-2019-14948
woocommerce-product-addon
WordPress
Medium
Fix reported
2024-01-22
PPOM for WooCommerce <= 32.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
CVE-2023-1839
woocommerce-product-addon
WordPress
Medium
Fix reported
2024-01-22
PPOM for WooCommerce <= 23.9 - Missing Authorization to Stored Cross-Site Scripting
CVE-2021-25018
woocommerce-product-addon
WordPress
Medium
Fix reported
2024-01-22
PPOM for WooCommerce <= 1.1 - Arbitrary File Upload
woocommerce-product-addon
WordPress
Critical
Fix reported
2024-01-22
