CVE-2019-14948: Najeebmedia Ppom For Woocommerce

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

Affected products

• Najeebmedia Ppom For Woocommerce: before 18.4 (fixed in 18.4)

Published 2019-08-12. Last modified 2026-06-17.