PPOM – Product Addons & Custom Fields for WooCommerce

Vulnerabilities 14Slug woocommerce-product-addonLatest version 33.0.18WordPress.org →

Minimum safe version

33.0.17

Update to 33.0.17 or later to address 14 fixable vulnerabilities

Latest available33.0.18 ✓

Medium 4.3

2025-11-21< 33.0.17

CVE-2025-66069

CVE Wordfence

High 7.5

2025-10-18< 33.0.16

CVE-2025-11691

CVE EUVD Wordfence

Critical 9.8

2025-10-18< 33.0.16

CVE-2025-11391

CVE EUVD Wordfence

Medium 5.9

2025-01-24< 33.0.9

CVE-2025-24668

CVE Patchstack Wordfence EUVD

Medium 5.3

2024-06-10< 32.0.21

CVE-2024-35728

CVE Patchstack Wordfence

Critical 9.8

2024-04-26< 32.0.19

CVE-2024-3962

CVE Patchstack Wordfence

N/A

< 2.0

WooCommerce Product Addons <= 1.1 - Arbitrary File Upload

WPScan

Medium 6.1

2023-05-30< 32.0.7

CVE-2023-2256

CVE Patchstack Wordfence WPScan

Medium 4.8

2023-05-15< 32.0.6

CVE-2023-1839

CVE Patchstack Wordfence WPScan

N/A

2016-09-19< 2.0

PPOM for WooCommerce <= 1.1 - Arbitrary File Upload

Wordfence

N/A

2016-09-19< 1.2

WordPress Product Add-Ons PLugin <= 1.1 - Arbitrary File Upload

Patchstack

N/A

2019-08-12< 18.4

WordPress PPOM for WooCommerce plugin <= 18.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Patchstack

Medium 5.4

2019-08-12< 18.4

CVE-2019-14948

CVE Wordfence WPScan

Medium 5.4

2022-02-14< 24.0

CVE-2021-25018

CVE Patchstack Wordfence WPScan