PPOM – Product Addons & Custom Fields for WooCommerce vulnerabilities
4 known vulnerabilities in PPOM – Product Addons & Custom Fields for WooCommerce from ThemeIsle. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
PPOM – Product Addons & Custom Fields for…: Improper Limitation of a Pathname to a Restricted Directory
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it possible f
- 7.5 High severity
PPOM – Product Addons & Custom Fields for…: Improper Neutralization of Special Elements used in an SQL Command
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the PPOM_Meta::get_fields_by_id() function in all versions up to, and including, 33.0.15 due to insufficient escaping on the user supplied paramet
- 9.8 Critical severity
PPOM – Product Addons & Custom Fields for…: Unrestricted Upload of File with Dangerous Type
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image cropper functionality in all versions up to, and including, 33.0.15. This makes it possible
- 9.8 Critical severity
PPOM – Product Addons & Custom Fields for…: Unrestricted Upload of File with Dangerous Type
The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppom_upload_file function in all versions up to, and including, 32.0.18. This makes it possible for unauthentica