SH
Product
ShopLentor
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 16Low 0
Watch
Add ShopLentor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-12493 | 9.8 | Nov 4 | ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template' Affected: before 3.2.6 |
| CVE-2023-0232 | 9.8 | Feb 21 | The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection Affected: before 2.5.4 |
| CVE-2022-47172 | 8.8 | Jul 17 | WordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 2.6.2 |
| CVE-2024-4566 | 7.1 | May 21 | ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification Affected: before 2.8.9 |
| CVE-2025-3775 | 6.5 | Apr 25 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter Affected: before 3.1.3 |
| CVE-2024-9538 | 6.5 | Oct 11 | ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template Affected: before 2.9.9 |
| CVE-2024-2868 | 6.4 | Apr 4 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout Affected: before 2.8.4 |
| CVE-2025-11823 | 5.4 | Oct 25 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: before 3.2.5 |
| CVE-2025-58990 | 5.4 | Sep 9 | WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability Affected: before 3.2.1 |
| CVE-2025-1527 | 5.4 | Mar 12 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module Affected: before 3.1.1 |
| CVE-2024-5530 | 5.4 | Jun 11 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget Affected: before 2.9.1 |
| CVE-2024-34767 | 5.4 | Jun 3 | WordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability Affected: through 2.8.7 |
| CVE-2024-3345 | 5.4 | May 21 | ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode Affected: before 2.8.9 |
| CVE-2024-3991 | 5.4 | May 2 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id Affected: before 2.8.8 |
| CVE-2024-1057 | 5.4 | Apr 20 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 2.8.2 |
| CVE-2024-2946 | 5.4 | Apr 9 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget Affected: before 2.8.5 |
| CVE-2024-1960 | 5.4 | Apr 9 | ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link Affected: before 2.8.2 |
| CVE-2023-0231 | 5.4 | Feb 21 | The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which… Affected: before 2.5.4 |
| CVE-2023-6327 | 5.3 | May 9 | ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products Affected: before 2.8.8 |
| CVE-2023-7067 | 4.3 | May 2 | ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store Affected: before 2.8.2 |
Showing 20