The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the save_all_order AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to a…
CVSS 3.1MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.00889·Published 2022-02-07·Fixed in 3.0.8CWE-89