Vulnerabilities / PPOM for WooCommerce
PPOM for WooCommerce vulnerabilities
Advisories WPSec published for PPOM – Product Addons & Custom Fields for WooCommerce. Other sources may list more. Its attack surface: PPOM for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0678 | PPOM for WooCommerce <= 34.0.10 - Unauthenticated Price Manipulation via 'price_matrix_found' Parameter | Medium 5.3 | 34.0.11 |
| 2026-10-08 | WPSEC-2026-0677 | PPOM for WooCommerce <= 34.0.10 - Unauthenticated Path Traversal to Arbitrary File Move via File Upload Field Names | High 8.1 | 34.0.11 |
| 2026-10-01 | WPSEC-2026-0054 | PPOM for WooCommerce <= 34.0.9 - Unauthenticated Price Manipulation via 'ppom_option_price' Parameter | Medium 5.3 | 34.0.10 |
License: CC BY 4.0