Lucene search
+L

13 matches found

NVD
NVD
•added 2026/10/15 7:17 p.m.•3 views

CVE-2026-103083

Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec...

5.4CVSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/15 6:00 p.m.•8 views

CVE-2026-103083 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec...

5.4CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/15 6:00 p.m.•5 views

EUVD-2026-102236

Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec...

5.4CVSS5.9AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/15 6:00 p.m.•6 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by sanghyeok Kim Hamoyeah in WordPress Plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions = 1.5.3...

5.4CVSS5.8AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2026/10/10 8:16 p.m.•9 views

CVE-2026-40800

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

9.3CVSS0.00383EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:34 p.m.•15 views

CVE-2026-40800

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress, versions

9.3CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:34 p.m.•43 views

CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

9.3CVSS0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:34 p.m.•8 views

EUVD-2026-96537

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

9.3CVSS5.8AI score0.00383EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•19 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes SQL Injection Vulnerability

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes is a plugin for bulk editing of WooCommerce product information, prices and attributes with support for Simple, Variant, External and Bundled products. WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes...

8.5CVSS8.1AI score0.0036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/16 12:00 a.m.•5 views

CVE-2025-47645: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows SQL Injection.This issue affects ELEX WooCommer...

8.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•7 views

CVE-2025-3280: Improper Neutralization of Special Elements used in an SQL Command

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attributevaluefilter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

6.5CVSS5.7AI score0.00387EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•7 views

CVE-2025-22352: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Blind SQL Injection.This issue affects ELEX...

7.6CVSS5.8AI score0.00753EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/01/03 2:32 p.m.•21 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions = 1.4.9...

7.6CVSS8.1AI score0.00753EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder