Login Request a demo
DE
Vendor
devitemsllc
5 products with CVEs on record
23
CVEs
0
On KEV
1
New 30D
Products
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
6.4
9 CVEs0 on KEV1 new
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
9.8
11 CVEs0 on KEV0 new
HE
HT Event – WordPress Event Manager Plugin for Elementor
devitemsllc
4.3
1 CVEs0 on KEV0 new
RU
Recurio – Ultimate Subscription for WooCommerce
devitemsllc
4.9
1 CVEs0 on KEV0 new
SG
Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System
devitemsllc
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-11895
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
6.4
0%
Sep 30HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting
CVE-2026-92554
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
6.1
0%
Sep 18ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name
CVE-2026-19806
SG
Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System
devitemsllc
8.8
1%
Sep 1Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token
CVE-2026-6020
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
7.2
1%
Aug 5ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API
CVE-2026-16811
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
4.9
0%
Jul 28ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
CVE-2026-16797
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
4.3
0%
Jul 28ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter
CVE-2026-12936
RU
Recurio – Ultimate Subscription for WooCommerce
devitemsllc
4.9
0%
Jul 8Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter
CVE-2026-6287
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
5.4
0%
May 27ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute
CVE-2026-4059
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
6.4
0%
Apr 14ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute
CVE-2026-1714
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
8.6
1%
Feb 18ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action
CVE-2025-13141
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
6.4
0%
Nov 21HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection
CVE-2025-12493
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
9.8
1%
Nov 4ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'
CVE-2025-11823
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
5.4
0%
Oct 25ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-8068
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions
CVE-2025-8401
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
CVE-2025-8151
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
CVE-2025-3775
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
6.5
0%
Apr 25ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter
CVE-2025-1802
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
5.4
0%
Mar 20HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2025-1527
SA
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
devitemsllc
5.4
0%
Mar 12ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module
CVE-2025-1261
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
5.4
0%
Mar 8HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget
CVE-2024-12599
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
6.4
0%
Feb 11HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2024-12597
HM
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
devitemsllc
5.4
0%
Feb 4HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css
CVE-2024-13216
HE
HT Event – WordPress Event Manager Plugin for Elementor
devitemsllc
4.3
0%
Jan 31HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor