Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2025-24668
Disclosure Date: January 24, 2025 (last updated January 25, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle PPOM for WooCommerce allows Stored XSS. This issue affects PPOM for WooCommerce: from n/a through 33.0.8.
0
Attacker Value
Unknown
CVE-2021-25018
Disclosure Date: February 14, 2022 (last updated October 07, 2023)
The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any authenticated to call it and set arbitrary settings. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored XSS issues
0
Attacker Value
Unknown
CVE-2019-14948
Disclosure Date: August 12, 2019 (last updated November 27, 2024)
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.
0
