Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-40800 EUVD-2026-96537GHSA-v5x3-fg92-xvh4

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Vendor: ELEXtensions Product: ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Category: Web / CMS

Description

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.

Affected products

VendorProductAffectedFixed
ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes ≤ 1.5.3 —

References