Skip to content
OpenAdvisories
High · 7.6 CVE-2025-47643 EUVD-2025-13747GHSA-32r9-qhg6-prph

WordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection Vulnerability

Published May 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX Product Feed for WooCommerce allows SQL Injection. This issue affects ELEX Product Feed for WooCommerce: from n/a through 3.1.2.

Affected products

VendorProductAffectedFixed
ELEXtensions ELEX Product Feed for WooCommerce ≤ 3.1.2 —

References