CVE-2026-31920 - Vulnerability Analysis

Overview

Devteam HaywoodTech Product Rearrange for WooCommerce <= 1.2.2 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted requests.

Severity & Score

Impact

Attackers can execute blind SQL injection to extract or manipulate database information, potentially compromising data integrity and confidentiality.

Mitigation

Update to the latest version beyond 1.2.2.

References

• https://patchstack.com/database/Wordpress/Plugin/products-rearrange-woocommerce/vulnerability/wordpress-product-rearrange-for-woocommerce-plugin-1-2-2-sql-injection-vulnerability?_s_id=cve

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner