{"vulnerability": "CVE-2026-40800", "sightings": [{"uuid": "2fb7ac04-ac06-4f6e-bbb3-48d8b4ebdc87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40800", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418346261526956", "content": "CVE-2026-40800 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-40800https://patchstack.com/database/wordpress/plugin/elex-bulk-edit-products-prices-attributes-for-woocommerce-basic/vulnerability/wordpress-elex-woocommerce-advanced-bulk-edit-products-prices-attributes-plugin-1-5-3-sql-injection-vulnerability?_s_id=cve#ELEXtensions #ELEXWooCommerceAdvancedBulkEditProducts,Prices&Attributes#CVE_2026_40800#bot", "creation_timestamp": "2026-10-10T19:49:38.282360Z"}, {"uuid": "beb95fb3-e025-46f5-ae64-214e282cef16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40800", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkcsejlrf2z", "content": "CVE-2026-40800 - elex woocommerce advanced bulk edit products, prices & attributes\nThe ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin (versions up to 1.5.3) allows anyone with a basic\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#elextensions #CVE #infosec", "creation_timestamp": "2026-10-10T20:20:04.509901Z"}, {"uuid": "ac8f0cbe-2d84-4056-9093-10e3e24c0b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40800", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkismxp4k2l", "content": "\ud83d\udea8 CVE-2026-40800 \u2014 CVSS 9.3 CRITICAL\n\nSubscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 vers...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-40800\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:07:35.548026Z"}, {"uuid": "adf15d69-1a25-45c1-b460-e6c10d039ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40800", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mxlybugb4t2n", "content": "CVE-2026-40800 and CVE-2026-42717 are SQL injection flaws in two WordPress plugins: ELEX WooCommerce Advanced Bulk Edit (to 1.5.3) and Leyka (to 3.32.3). No exploitation is confirmed. Update both plugins to the latest available version.", "creation_timestamp": "2026-10-11T12:17:13.057565Z"}]}