PA
Product
Product Addons & Fields For Woocommerce
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 3Low 0
Watch
Add Product Addons & Fields For Woocommerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3962 | 9.8 | Apr 26 | The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppom_upload_file function in… Affected: before 32.0.19 |
| CVE-2023-2256 | 6.1 | May 30 | The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting Affected: before 32.0.7 |
| CVE-2024-35728 | 5.3 | Jun 10 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Themeisle PPOM for WooCommerce allows Code Inclusion.This issue… Affected: before 32.0.21 |
| CVE-2023-1839 | 4.8 | May 15 | The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.6 does not sanitize and escape some of its setting fields, which could allow high-privilege users such as… Affected: before 32.0.6 |
Showing 4