CVE-2025-47643: WordPress ELEX Product Feed for WooCommerce plugin <= 3.1.2 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX Product Feed for WooCommerce allows SQL Injection. This issue affects ELEX Product Feed for WooCommerce: from n/a through 3.1.2.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX Product Feed for WooCommerce elex-product-feed allows SQL Injection.This issue affects ELEX Product Feed for WooCommerce: from n/a through <= 3.1.2.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47643?
CVE-2025-47643 is classified as a high severity SQL Injection vulnerability.
How do I fix CVE-2025-47643?
To fix CVE-2025-47643, upgrade the ELEX Product Feed for WooCommerce plugin to version 3.1.3 or later.
What type of vulnerability is CVE-2025-47643?
CVE-2025-47643 is an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands.
What versions of ELEX Product Feed for WooCommerce are affected by CVE-2025-47643?
CVE-2025-47643 affects ELEX Product Feed for WooCommerce versions up to and including 3.1.2.
Can CVE-2025-47643 be exploited remotely?
Yes, CVE-2025-47643 can be exploited remotely if an attacker can send crafted SQL queries to the affected application.