Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-30998 EUVD-2022-52704GHSA-m28r-9pmc-xw7c

WordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

Published Jul 22, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WooPlugins.co Product: Homepage Product Organizer for WooCommerce (WordPress plugin) Category: Web / CMS

Description

Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage Product Organizer for WooCommerce plugin <= 1.1 at WordPress.

Affected products

VendorProductAffectedFixed
WooPlugins.co Homepage Product Organizer for WooCommerce (WordPress plugin) <= 1.1 – ≤ 1.1 —

References