Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Devteam HaywoodTech Clear all filters
TI-2026-24470 CVE-2026-31921 · GHSA-47mh-5whc-8j72

WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability

Priority MEDIUM 41

Missing Authorization vulnerability in Devteam HaywoodTech Product Rearrange for WooCommerce products-rearrange-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Produ…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00271 Published 2026-03-25 No fix listed CWE-862
TI-2026-24469 CVE-2026-31920 · GHSA-pj5h-hpm3-5xqp

WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Devteam HaywoodTech Product Rearrange for WooCommerce products-rearrange-woocommerce allows Blind SQL Injection.This i…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00294 Published 2026-03-25 No fix listed CWE-89