CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autore: Byte Reaper Descrizione CVE-2025-10046 è una vulnerabilità di iniezione SQL nel plugin ELEX WooCommerce Google Shopping Product Feed per WordPress, versioni 1.4.3 e precedenti. Il problema risiede nel file includes/elex-manage-feed-ajax.ph...

CVE-2025-10046

The CVE-2025-10046 issue affects the WordPress plugin ELEX WooCommerce Google Shopping (Google Product Feed) up to version 1.4.3. The vulnerability resides in includes/elex-manage-feed-ajax.php where the file_to_delete parameter is not properly sanitized and the SQL query is not prepared, allowin...

PT-2025-36366

Name of the Vulnerable Software and Affected Versions: ELEX WooCommerce Google Shopping plugin for WordPress versions up to and including 1.4.3 Description: The ELEX WooCommerce Google Shopping plugin for WordPress is susceptible to SQL Injection through the file to delete parameter. Insufficient...