DE
Vendor
devitemsllc
52
CVEs
0
On KEV
2
New 30D
Products
HM7.5
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
26 CVEs0 on KEV2 new
SA9.8
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
23 CVEs0 on KEV0 new
HE4.3
HT Event – WordPress Event Manager Plugin for Elementor
devitemsllc
1 CVEs0 on KEV0 new
RU4.9
Recurio – Ultimate Subscription for WooCommerce
devitemsllc
1 CVEs0 on KEV0 new
SG8.8
Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System
devitemsllc
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111318 New | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Oct 29 | HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink |
| CVE-2026-11895 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 6.4 | Sep 30 | HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting |
| CVE-2026-92554 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 6.1 | Sep 18 | ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name |
| CVE-2026-19806 | SG Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System devitemsllc | 8.8 | Sep 1 | Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token |
| CVE-2026-6020 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 7.2 | Aug 5 | ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API |
| CVE-2026-16811 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 4.9 | Jul 28 | ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter |
| CVE-2026-16797 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 4.3 | Jul 28 | ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter |
| CVE-2026-12936 | RU Recurio – Ultimate Subscription for WooCommerce devitemsllc | 4.9 | Jul 8 | Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter |
| CVE-2026-6287 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | May 27 | ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute |
| CVE-2026-4059 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 6.4 | Apr 14 | ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute |
| CVE-2026-1714 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 8.6 | Feb 18 | ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action |
| CVE-2025-13141 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 6.4 | Nov 21 | HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection |
| CVE-2025-12493 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 9.8 | Nov 4 | ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template' |
| CVE-2025-11823 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | Oct 25 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2025-8068 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 4.3 | Jul 31 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions |
| CVE-2025-8401 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 4.3 | Jul 31 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure |
| CVE-2025-8151 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 4.3 | Jul 31 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions |
| CVE-2025-3775 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 6.5 | Apr 25 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter |
| CVE-2025-1802 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Mar 20 | HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2025-1527 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | Mar 12 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module |
| CVE-2025-1261 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Mar 8 | HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-12599 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 6.4 | Feb 11 | HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-12597 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Feb 4 | HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css |
| CVE-2024-13216 | HE HT Event – WordPress Event Manager Plugin for Elementor devitemsllc | 4.3 | Jan 31 | HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor |
| CVE-2024-9538 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 6.5 | Oct 11 | ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template |
| CVE-2024-8910 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 4.3 | Sep 25 | HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id |
| CVE-2024-8668 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | Sep 25 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting |
| CVE-2024-5215 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Jun 26 | HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2024-5173 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Jun 26 | HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings |
| CVE-2024-5530 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | Jun 11 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget |
| CVE-2024-4876 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 21 | HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-3345 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | May 21 | ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode |
| CVE-2024-4566 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 7.1 | May 21 | ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification |
| CVE-2024-4875 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 4.3 | May 21 | HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update |
| CVE-2024-3990 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 9 | HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget |
| CVE-2023-6327 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.3 | May 9 | ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products |
| CVE-2024-3989 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 9 | HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify |
| CVE-2024-3307 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 2 | HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-2084 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 2 | HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget |
| CVE-2023-7067 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 4.3 | May 2 | ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store |
| CVE-2024-3991 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | May 2 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id |
| CVE-2023-6214 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 7.5 | May 2 | HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products |
| CVE-2024-2790 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 2 | HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ |
| CVE-2024-3308 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 2 | HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget |
| CVE-2024-2085 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | May 2 | HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' |
| CVE-2024-1057 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | Apr 20 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-2946 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | Apr 9 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget |
| CVE-2024-1960 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 5.4 | Apr 9 | ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link |
| CVE-2024-1974 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 6.5 | Apr 9 | HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal |
| CVE-2024-2868 | SA ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin devitemsllc | 6.4 | Apr 4 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout |
| CVE-2024-1421 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Mar 12 | HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget |
| CVE-2024-1397 | HM HT Mega Addons for Elementor – Elementor Widgets & Template Builder devitemsllc | 5.4 | Mar 12 | HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag |