Free plan, no credit card, first error in minutes.
Create a Project for FreeDiscover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
A critical vulnerability in the PPOM for WooCommerce WordPress plugin allows unauthenticated attackers to delete and expose arbitrary files on the server, potentially leading to remote code execution.
An unauthenticated SQL injection vulnerability in PPOM for WooCommerce allows attackers to extract sensitive database information when Legacy Price Calculations are enabled.
A vulnerability in PPOM – Product Addons & Custom Fields for WooCommerce allows unauthenticated attackers to upload arbitrary files via the image cropper, potentially enabling remote code execution on sites with the paid version active.
A critical arbitrary file upload vulnerability in the Product Addons & Fields for WooCommerce WordPress plugin allows unauthenticated attackers to upload arbitrary files and potentially execute remote code when PPOM Pro and a product with a file upload field are present.
A vulnerability in the PPOM for WooCommerce plugin allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution.
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.