GCVE - cpe:2.3:a:themeisle:ppom_for_woocommerce:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:themeisle:ppom_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Themeisle (`952ca4ef-81b0-5b76-b2cc-d8cf654b2d29`)
Product	Ppom For Woocommerce (`d294e4ee-aee0-5b1b-9f2d-fcfeb1ec168d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-56050`	vulnerable	2026-07-29 01:00:28.813171	WordPress PPOM for WooCommerce plugin <= 33.0.18 - Broken Access Control vulnerability MEDIUM (6.5) Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PPOM for WooCommerce: from n/a through 33.0.18. Published: 2026-06-25T13:34:41.354Z Updated: 2026-06-25T14:03:06.564Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/woocommerce-product-addon/vulnerability/wordpress-ppom-for-woocommerce-plugin-33-0-18-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-66069`	vulnerable	2026-06-08 07:39:21.191186	WordPress PPOM for WooCommerce plugin <= 33.0.16 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPOM for WooCommerce: from n/a through <= 33.0.16. Published: 2025-11-21T12:29:56.025Z Updated: 2026-04-28T16:14:15.729Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/woocommerce-product-addon/vulnerability/wordpress-ppom-for-woocommerce-plugin-33-0-16-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-24668`	vulnerable	2026-06-08 07:12:49.694450	WordPress PPOM for WooCommerce plugin <= 33.0.8 - Cross Site Scripting (XSS) vulnerability MEDIUM (5.9) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon allows Stored XSS.This issue affects PPOM for WooCommerce: from n/a through <= 33.0.8. Published: 2025-01-24T17:24:45.470Z Updated: 2026-04-28T16:11:31.622Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/woocommerce-product-addon/vulnerability/wordpress-ppom-for-woocommerce-plugin-33-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35728`	vulnerable	2026-06-08 06:39:42.528081	WordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability MEDIUM (5.3) Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Themeisle PPOM for WooCommerce allows Code Inclusion.This issue affects PPOM for WooCommerce: from n/a through 32.0.20. Published: 2024-06-10T16:21:23.582Z Updated: 2026-04-28T16:09:54.046Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/woocommerce-product-addon/wordpress-product-addons-fields-for-woocommerce-plugin-32-0-20-content-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.