Najeebmedia Ppom For Woocommerce vulnerabilities

2 vulnerabilities

Known vulnerabilities in Najeebmedia Ppom For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2021-25018najeebmediappom_for_woocommerce+2
EPSS score
0.52%
The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any authenticated to call it and set arbitrary settings. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored XSS issues5.4CVE-2019-14948najeebmediappom_for_woocommerce+1
EPSS score
1.04%
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.