Skip to content
OpenAdvisories

Product · ELEXtensions

ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-3280

    ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection

    The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value_filter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied …

    ELEXtensions ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) Web / CMS