SQL Injection Vulnerability in ELEX WooCommerce Advanced Bulk Edit Plugin

CVE-2025-47645

What is CVE-2025-47645?

A vulnerability has been identified in the ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin, which allows an attacker to manipulate SQL queries due to inadequate neutralization of special SQL elements. This SQL injection vulnerability can lead to unauthorized data access and manipulation. The affected versions of the plugin are from an unspecified release up to 1.4.9. Administrators using these versions should take the necessary steps to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References