WordPress plugin
PPOM – Product Addons & Custom Fields for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 14 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical4
- High1
- Medium9
- Low0
All PPOM – Product Addons & Custom Fields for WooCommerce vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
PPOM – Product Addons & Custom Fields for WooCommerce: common questions
Does PPOM – Product Addons & Custom Fields for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 14 known vulnerabilities in PPOM – Product Addons & Custom Fields for WooCommerce: 4 critical, 1 high, 9 medium. None are known to affect version null.
How do I check which version of PPOM – Product Addons & Custom Fields for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent PPOM – Product Addons & Custom Fields for WooCommerce vulnerability?
CVE-2026-104801, published Oct 9, 2026: PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter. Severity: Critical (CVSS 9.1).
Is any PPOM – Product Addons & Custom Fields for WooCommerce vulnerability listed in CISA KEV?
No. None of the known PPOM – Product Addons & Custom Fields for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.
