CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autor: Byte Reaper Descripción CVE-2025-10046 es una vulnerabilidad de inyección SQL en el plugin ELEX WooCommerce Google Shopping Product Feed para WordPress, versiones 1.4.3 y anteriores. El problema se encuentra en el archivo...

CVE-2025-10046

The CVE-2025-10046 issue affects the WordPress plugin ELEX WooCommerce Google Shopping (Google Product Feed) up to version 1.4.3. The vulnerability resides in includes/elex-manage-feed-ajax.php where the file_to_delete parameter is not properly sanitized and the SQL query is not prepared, allowin...

PT-2025-36366

Name of the Vulnerable Software and Affected Versions: ELEX WooCommerce Google Shopping plugin for WordPress versions up to and including 1.4.3 Description: The ELEX WooCommerce Google Shopping plugin for WordPress is susceptible to SQL Injection through the file to delete parameter. Insufficient...