Product Rearrange for WooCommerce
Product Rearrange for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; none of them are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include SQL Injection.
None of the 2 issues recorded for Product Rearrange for WooCommerce have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by hivesec. Product Rearrange for WooCommerce is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2026-31920Product Rearrange for WooCommerce <= 1.2.2 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records
Product Rearrange for WooCommerce
Author
Devteam HaywoodTech
Product Rearrange for WooCommerce allows you to reorder the WooCommerce products in the admin end using the elegant drag and drop order in the most robust way. This plugin will save the order as mush as possible. Product Rearrange for WooCommerce plugin used the drag and drop UI in most elegant manner so that it will be easy for the enduser to sort the WooCommerce products. This plugin used the REST API to sort the products. This plugin allows you to select the WooCommerce Product Category and sort the products based upon selected category.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C