Najeebmedia Ppom For Woocommerce
2 CVEs affecting Najeebmedia Ppom For Woocommerce. Latest disclosed: 2022-02-14. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25018 | Medium | 5.4 | 2022-02-14 | The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any a… |
CVE-2019-14948 | Medium | 5.4 | 2019-08-12 | The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure. |