SA
Product
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
by devitemsllc · last CVE Sep 18, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 8Low 0
Watch

Add ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-3775
6.5
0%
Apr 25
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter
Affected: through 3.1.2
CVE-2026-4059
6.4
0%
Apr 14
ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute
Affected: through 3.3.5
CVE-2026-92554
6.1
0%
Sep 18
ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name
Affected: through 3.5.1
CVE-2026-6287
5.4
0%
May 27
ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute
Affected: through 3.3.8
CVE-2025-11823
5.4
0%
Oct 25
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 3.2.4
CVE-2025-1527
5.4
0%
Mar 12
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module
Affected: through 3.1.0
CVE-2026-16811
4.9
0%
Jul 28
ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Affected: through 3.4.5
CVE-2026-16797
4.3
0%
Jul 28
ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter
Affected: through 3.4.5
Showing 8