Skip to content
Threat Feed
Subscribe

Product

PPOM – Product Addons & Custom Fields for WooCommerce (<= 34.0.10)

1 brief RSS
critical advisory

Unauthenticated Arbitrary File Deletion and Read in PPOM Plugin for WooCommerce

The PPOM - Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to unauthenticated arbitrary file deletion and reading via improper path validation in the rename_files function, facilitating potential RCE.

PPOM – Product Addons & Custom Fields for WooCommerce web-application wordpress vulnerability
1t 1c