CVE-2026-40800 and CVE-2026-42717 are SQL injection vulnerabilities in two WordPress plugins. CVE-2026-40800 affects ELEX WooCommerce Advanced Bulk Edit through 1.5.3; CVE-2026-42717 affects Leyka through 3.32.3. No exploitation is confirmed. Update both plugins to the latest available version. https://www.cve.org/CVERecord?id=CVE-2026-40800 #CVE #infosec #cybersecurity