CVE-2024-35728: Themeisle Product Addons & Fields For Woocommerce

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Themeisle PPOM for WooCommerce allows Code Inclusion.This issue affects PPOM for WooCommerce: from n/a through 32.0.20.

Affected products

• Themeisle Product Addons & Fields For Woocommerce: before 32.0.21 (fixed in 32.0.21)

Published 2024-06-10. Last modified 2026-06-17.