Wordpress Plugin Rearrange Woocommerce Products 安全漏洞

WordPress plugin is a WordPress open source application plugin. SQL injection vulnerability exists in the Wordpress Plugin Rearrange Woocommerce Products, which stems from the product's saveallorder link not validating the characters in the data. An attacker could exploit the vulnerability for SQ...

CVE-2021-24928: Improper Neutralization of Special Elements used in an SQL Command

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the saveallorder AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to...