WordPress plugin SQL injection vulnerability (CNVD-2022-31823)

WordPress plugin is a WordPress open source application plugin. SQL injection vulnerability exists in the Wordpress Plugin Rearrange Woocommerce Products, which stems from the product's saveallorder link not validating the characters in the data. An attacker could exploit the vulnerability for SQ...

CVE-2021-24928

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the saveallorder AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to...

Sql injection

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the saveallorder AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to...

CVE-2021-24928

CVE-2021-24928 concerns the WordPress plugin “Rearrange Woocommerce Products” (versions before 3.0.8). The vulnerability arises from insufficient access controls in the save_all_order AJAX action and lack of validation/escaping for user input in SQL statements, enabling an authenticated user (e.g...

PT-2022-9513 · WordPress · Rearrange Woocommerce Products

Name of the Vulnerable Software and Affected Versions: Rearrange Woocommerce Products WordPress plugin versions prior to 3.0.8 Description: The issue is related to improper access controls in the save all order AJAX action and lack of validation and escaping when inserting user data into SQL...

Wordpress Plugin Rearrange Woocommerce Products 安全漏洞

WordPress plugin is a WordPress open source application plugin. SQL injection vulnerability exists in the Wordpress Plugin Rearrange Woocommerce Products, which stems from the product's saveallorder link not validating the characters in the data. An attacker could exploit the vulnerability for SQ...