Medium · 6.5 CVE-2026-56050 EUVD-2026-39398GHSA-qp5v-h8qw-wpmh

WordPress PPOM for WooCommerce plugin <= 33.0.18 - Broken Access Control vulnerability

Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by Patchstack

Description

Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects PPOM for WooCommerce: from n/a through 33.0.18.

Vendor	Product	Affected	Fixed
Themeisle	PPOM for WooCommerce	≤ 33.0.18	—