WordPress security by component

ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes

Plugin description

ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jul 16, 2025; the highest CVE/CNA score is 8.5.

Plugin slug: elex-bulk-edit-products-prices-attributes-for-woocommerce-basic

Latest vulnerability

CVE-2025-47645: ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: SQL injection

ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedJul 16, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jul 16, 2025	CVE-2025-47645 ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: SQL injection ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.5 NVDPending
Apr 24, 2025	CVE-2025-3280 ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: SQL injection ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVDPending
Jan 07, 2025	CVE-2025-22352 ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: SQL injection ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.6 NVDPending