Themeisle Ppom For Woocommerce vulnerabilities

3 CVEs affecting Themeisle Ppom For Woocommerce, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-56050, published 2026-06-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-24668, published 2025-01-24. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon allows Stored XSS.This issue affects…
CVE-2026-56050, published 2026-06-25. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PPOM for WooCommerce: from n/a…
CVE-2025-66069, published 2025-11-21. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPOM for…