SQL Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL InejctionCVE-2025-10046elextensions · CVSS 4.9 · 0.8% likely

   CWE-89

2. WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerabilityCVE-2025-22352ELEXtensions · CVSS 7.6 · 0.8% likely

   CWE-89

3. WordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection VulnerabilityCVE-2025-47643ELEXtensions · CVSS 7.6 · 0.4% likely

   CWE-89

4. ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL InjectionCVE-2025-3280elextensions · CVSS 6.5 · 0.4% likely

   CWE-89

5. WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.4.9 - Subscriber+ SQL Injection vulnerabilityCVE-2025-47645ELEXtensions · CVSS 8.5 · 0.4% likely

   CWE-89

6. WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerabilityCVE-2026-40800ELEXtensions · CVSS 9.3 · 0.4% likely

   CWE-89

7. WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerabilityCVE-2026-48964ELEXtensions · CVSS 8.5 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.