Advisories · Technology

ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes.

Every CVE that names ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103083 CVE record

CVSS 5.4 Medium

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability
- ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-40800 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability
- ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
- SQL injection
Not analysed yet 10 Oct 2026
CVE-2025-47645 CVE record

CVSS 8.5 High

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.4.9 - Subscriber+ SQL Injection vulnerability
- ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
- SQL injection
Not analysed yet 16 Jul 2025
CVE-2025-22352 CVE record

CVSS 7.6 High

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerability
- ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
- SQL injection
Not analysed yet 7 Jan 2025