VendorsThemeisleproduct_addons_%5C%26_fields_for_woocommerceall versions
Vulnerabilities

Themeisle Product Addons & Fields for WooCommerce

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4CVEs
CVE-2024-3962
Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file
Published 2024-04-26 · Modified
9.8EPSS 0.014
CVE-2023-2256
Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting
Published 2023-05-30 · Modified
6.1EPSS 0.010
CVE-2024-35728
WordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability
Published 2024-06-10 · Modified
5.3EPSS 0.003
CVE-2023-1839
Product Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site Scripting
Published 2023-05-15 · Modified
4.8EPSS 0.005