ThemeIsle PPOM – Product Addons & Custom Fields for WooCommerce

• CVE-2026-104801 Critical 9.1 PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter 0.8%
• CVE-2025-11691 High 7.5 PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL Injection 0.5%
• CVE-2025-11391 Critical 9.8 PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload 1.0%
• CVE-2024-3962 Critical 9.8 Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file 1.4%
• CVE-2024-1047 Medium 5.3 ThemeIsle SDK <= Various Versions - Missing Authorization 0.6%