CVE-2025-31599

CVE-2025-31599 represents an unauthenticated SQL Injection in Bulk Product Sync (WooCommerce) with impact per the CVSS context. According to Wordfence, Bulk Product Sync – Bulk Product Editor for WooCommerce with Google Sheets (

WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by theviper17 in WordPress Plugin Bulk Product Sync versions = 8.6...