Medium severity5.3NVD Advisory· Published Jun 10, 2024· Updated Jun 17, 2026

CVE-2024-35728

Description

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Themeisle PPOM for WooCommerce allows Code Inclusion.This issue affects PPOM for WooCommerce: from n/a through 32.0.20.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Themeisle/Product Addons \& Fields For Woocommerce
cpe:2.3:a:themeisle:product_addons_\&_fields_for_woocommerce:*:*:*:*:*:wordpress:*:*
Range: <32.0.21
WordPress/PPOM for WooCommercellm-fuzzy
Range: <=32.0.20
Themeisle/PPOM for WooCommercecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/woocommerce-product-addon/wordpress-product-addons-fields-for-woocommerce-plugin-32-0-20-content-injection-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000