CVE-2026-31921

CVE-2026-31921 affects Product Rearrange for WooCommerce (plugin) up to version 1.2.2. Described as Missing Authorization vulnerability enabling unauthorized access to rearrangement functionality. CVSSv3.1 base score 8.2 (HIGH) with network attack vector, no user interaction, no confidentiality i...

WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by hivesec in WordPress Plugin Product Rearrange for WooCommerce versions = 1.2.2...

CVE-2021-24928

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the saveallorder AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to...