cleantalk
Vulnerabilities and Security Researches

Product Addons & Fields for WooCommerce, CVE-2025-66069

CVE, Research URL

CVE-2025-66069

Published on
Nov 21, 2025
Research Description
Missing Authorization vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPOM for WooCommerce: from n/a through <= 33.0.16.
Affected versions
max 33.0.16.
Status
vulnerable