Themeisle Ppom – Product Addons & Custom Fields For Woocommerce
5 CVEs affecting Themeisle Ppom – Product Addons & Custom Fields For Woocommerce. Latest disclosed: 2026-10-10. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-11391 | Critical | 9.8 | 2025-10-18 | The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in t… |
CVE-2024-3962 | Critical | 9.8 | 2024-04-26 | The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppom_upload… |
CVE-2026-104801 | Critical | 9.1 | 2026-10-10 | The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validatio… |
CVE-2025-11691 | High | 7.5 | 2025-10-18 | The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the PPOM_Meta::get_fields_by_id() function in… |
CVE-2024-1047 | Medium | 5.3 | 2024-02-02 | Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on th… |