CVE-2022-30998
Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage Product Organizer for WooCommerce plugin <= 1.1 at WordPress.
- Score
- CVSS 3.1 9.1 Critical
- Status
- Modified - audit@patchstack.com
- Published
- 2022-07-22
- Last modified
- 2026-04-28
- Weaknesses
- CWE-89
Affected products
- Homepage Product Organizer For Woocommerce (Homepage Product Organizer For Woocommerce Project)
- Homepage Product Organizer For Woocommerce Wordpress Plugin (Wooplugins.co)
References
- https://patchstack.com/database/vulnerability/homepage-product-organizer-for-woocommerce/wordpress-homepage-product-org…
- https://wordpress.org/plugins/homepage-product-organizer-for-woocommerce/#description
