CoreCVE
Back

HIGH

WordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection Vulnerability

Published May 7, 2025

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX Product Feed for WooCommerce allows SQL Injection. This issue affects ELEX Product Feed for WooCommerce: from n/a through 3.1.2.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Patchstack
Published May 7, 2025
Updated Apr 28, 2026
Reserved May 7, 2025
Link CVE-2025-47643

CISA Vulnrichment

Updated May 7, 2025

NVD

Status Deferred
Modified Jun 17, 2026
Link CVE-2025-47643

Red Hat

No data

ENISA EUVD

Assigner Patchstack
Published May 7, 2025
Updated Apr 28, 2026
Link EUVD-2025-13747

GitHub

No data