Devteam HaywoodTech vulnerabilities
Published CVEs affecting Devteam HaywoodTech products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-31921
High · 8.2
CWE-862 Mar 25, 2026
WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Devteam HaywoodTech Product Rearrange for WooCommerce products-rearrange-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Rearrange for WooCommerce: from n/a through <= 1.2.2.
CVE-2026-31920
Critical · 9.3
CWE-89 Mar 25, 2026
Product Rearrange for WooCommerce SQL Injection (CVE-2026-31920)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Devteam HaywoodTech Product Rearrange for WooCommerce products-rearrange-woocommerce allows Blind SQL Injection.This issue affects Product Rearrange for WooCommerce: from n/a through <= 1.2.2.