cleantalk
Vulnerabilities and Security Researches

ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes, CVE-2025-47645

CVE, Research URL

CVE-2025-47645

Published on
Jul 16, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes allows SQL Injection. This issue affects ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: from n/a through 1.4.9.
Affected versions
Min -, max 1.5.0.
Status
vulnerable