SH
Product
Shoplentor
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 16Low 0
Watch
Add Shoplentor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3775 | 6.5 | Apr 25 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter Affected: before 3.1.3 |
| CVE-2024-9538 | 6.5 | Oct 11 | The ShopLentor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.8 via the 'render' function in… Affected: before 2.9.9 |
| CVE-2024-2868 | 6.4 | Apr 4 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site… Affected: before 2.8.4 |
| CVE-2025-11823 | 5.4 | Oct 25 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: before 3.2.5 |
| CVE-2025-58990 | 5.4 | Sep 9 | WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability Affected: before 3.2.1 |
| CVE-2025-1527 | 5.4 | Mar 12 | ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module Affected: before 3.1.1 |
| CVE-2024-5530 | 5.4 | Jun 11 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site… Affected: before 2.9.1 |
| CVE-2024-34767 | 5.4 | Jun 3 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HasThemes ShopLentor allows Stored XSS.This issue affects ShopLentor:… Affected: before 2.8.8 |
| CVE-2024-3345 | 5.4 | May 21 | The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's woolentorsearch shortcode in all versions up to, and including, 2.8.8 due to… Affected: before 2.8.9 |
| CVE-2024-3991 | 5.4 | May 2 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site… Affected: before 2.8.8 |
| CVE-2024-1057 | 5.4 | Apr 20 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site… Affected: before 2.8.2 |
| CVE-2024-2946 | 5.4 | Apr 9 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site… Affected: before 2.8.5 |
| CVE-2024-1960 | 5.4 | Apr 9 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site… Affected: before 2.8.2 |
| CVE-2023-0231 | 5.4 | Feb 21 | The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which… Affected: before 2.5.4 |
| CVE-2023-6327 | 5.3 | May 14 | The ShopLentor (formerly WooLentor) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the purchased_new_products function in… Affected: before 2.8.8 |
| CVE-2023-7067 | 4.3 | May 2 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to unauthorized… Affected: before 2.8.2 |
Showing 16