Skip to content
Noroxi

PPOM for WooCommerce

woocommerce-product-addon · plugin

Known security vulnerabilities for PPOM for WooCommerce. Find out in seconds which version runs on your site with WP Lens.

8 known vulnerabilities

2 critical · 1 with public exploit code · latest Jun 25, 2026

Vulnerabilities

  • CVE-2025-11391

    PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload

    Critical 9.8

  • CVE-2024-3962

    Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file

    Critical 9.8

  • CVE-2025-11691

    PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL Injection

    High 7.5

  • CVE-2026-56050

    WordPress PPOM for WooCommerce plugin <= 33.0.18 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2025-24668

    WordPress PPOM for WooCommerce plugin <= 33.0.8 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

  • CVE-2019-14948

    The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

    Medium 5.4

  • CVE-2024-35728

    WordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability

    Medium 5.3

  • CVE-2025-66069

    WordPress PPOM for WooCommerce plugin <= 33.0.16 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory