Vulnerability · Published Feb 7, 2022 · Assigned by WPScan

CVE-2021-24928Rearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL Injection

Medium 6.5

In plain English

A medium-severity SQL injection in Rearrange Woocommerce Products from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)0.9%top 40.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the save_all_order AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to modify arbitrary post content (for example with an XSS payload), as well as exfiltrate any data by copying it to another post.

Affected products (as reported)

Vendor	Product	Versions
Unknown	Rearrange Woocommerce Products	3.0.8 – before 3.0.8

Weakness: CWE-89

References

https://wpscan.com/vulnerability/3762a77c-b8c9-428f-877c-bbfd7958e7be x_refsource_MISC