PT-2026-27996 · Woocommerce · Rearrange Woocommerce Products

Published 2026-03-25 · Updated 2026-03-29 · CVE-2026-31921

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions Product Rearrange for WooCommerce versions through 1.2.2

Description An authorization flaw exists in Product Rearrange for WooCommerce. This issue allows exploitation of incorrectly configured access control security levels.

Recommendations Update Product Rearrange for WooCommerce to a version later than 1.2.2.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-31921

Affected Products

Rearrange Woocommerce Products

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-31921 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/products-rearrange-woocommerce/vulnerability/wordpress-product-rearrange-for-woocommerce-plugin-1-2-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2038250189652193391 · Twitter Post