CVE-2025-22352

1️⃣ Component type WordPress plugin 2️⃣ Component details Component name ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Vulnerable version = 1.4.8 Component slug elex-bulk-edit-products-prices-attributes-for-woocommerce-basic Component link...

CVE-2026-40800

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

EUVD-2026-96537

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

CVE-2026-40800

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress, versions

Exploit for CVE-2026-14962

CVE-2026-14962 Wordpress Plugin ELEX WooCommerce Request a Quo...

CVE-2026-14962

The ELEX WooCommerce Request a Quote WordPress plugin (versions

CVE-2026-14962: Improper Neutralization of Special Elements used in an SQL Command

The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary data from the database...

EUVD-2025-27075

Malicious code in bioql PyPI...

EUVD-2024-29151

Malicious code in bioql PyPI...

EUVD-2024-29927

Malicious code in bioql PyPI...

EUVD-2025-12122

Malicious code in bioql PyPI...

EUVD-2025-8723

Malicious code in bioql PyPI...

EUVD-2024-29260

Malicious code in bioql PyPI...

EUVD-2024-50730

Malicious code in bioql PyPI...

EUVD-2025-2751

Malicious code in bioql PyPI...

ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection

/ Exploit Title : ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection Author : Byte Reaper Cve id : CVE-2025-10046 Service : plugin wordpress Plugin : ELEX WooCommerce Google Shopping Version : 1.4.3 Type : SQL injection Parameter injection : filetodelete Location file :...

WordPress ELEX WooCommerce Google Shopping (Google Product Feed) plugin <= 1.4.3 - Authenticated (Admin+) SQL Inejction vulnerability

Authenticated Admin+ SQL Inejction vulnerability discovered by dutafi in WordPress Plugin ELEX WooCommerce Google Shopping versions = 1.4.3...

CVE-2025-10046: Improper Neutralization of Special Elements used in an SQL Command

The ELEX WooCommerce Google Shopping Google Product Feed plugin for WordPress is vulnerable to SQL Injection via the 'filetodelete' parameter in all versions up to, and including, 1.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

WordPress plugin ELEX WooCommerce Google Shopping SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...