CRITICAL 9.3 CVE-2026-40800 Published 10 Oct 2026

ELEX WooCommerce Advanced Bulk Edit Plugin SQL Injection Vulnerability

Worried this affects your website?

Get Emergency Help help@myserverhacked.com

ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes is affected by a Subscriber SQL Injection vulnerability in versions up to and including 1.5.3.

This flaw allows a subscriber-level user to perform SQL injection attacks against the plugin.

Reference: CVE-2026-40800 on NVD

← Back to Security News