CVE-2025-22352 – WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.8 - SQL Injection vulnerability

https://notcve.org/view.php?id=CVE-2025-22352

03 Jan 2025 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes allows Blind SQL Injection.This issue affects ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: from n/a through 1.4.8. Vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('Inyección SQL') en ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices y Attribut... • https://github.com/DoTTak/CVE-2025-22352 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •