CVE-2025-11391 | themeisle PPOM Plugin up to 33.0.15 on WordPress Image Cropper unrestricted upload

October 18, 2025 Yanac

A vulnerability was found in themeisle PPOM Plugin up to 33.0.15 on WordPress and classified as critical. This issue affects some unknown processing of the component Image Cropper. Executing manipulation can lead to unrestricted upload.

This vulnerability appears as CVE-2025-11391. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More