ShopLentor
DevItems
Developer
3.4.6
Latest version
90,000
Installations
No date
Last updated
Vulnerability history
0 present
26 patched
6 Mitigation rules
- All-in-One WooCommerce Growth & Store Enhancement Plugin plugin <= 3.3.8 - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.3.826/05/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute vulnerability<= 3.3.514/04/2026
- Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action vulnerability<= 3.3.218/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.8.103/02/2026
- Unauthenticated Local PHP File Inclusion via 'load_template' vulnerability<= 3.2.504/11/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 3.2.425/10/2025
- Cross Site Scripting (XSS) Vulnerability<= 3.2.009/09/2025
- Unauthenticated Server-Side Request Forgery via URL Parameter vulnerability<= 3.1.224/04/2025
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module vulnerability<= 3.1.011/03/2025
- Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template vulnerability<= 2.9.811/10/2024
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability<= 2.9.725/09/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget vulnerability<= 2.9.011/06/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode vulnerability<= 2.8.821/05/2024
- Missing Authorization to WordPress Option Modification vulnerability<= 2.8.821/05/2024
- Cross Site Scripting (XSS) vulnerability<= 2.8.717/05/2024
- Missing Authorization via purchased_new_products vulnerability<= 2.8.703/05/2024
- Authenticated (contributor+) Stored Cross-Site Scripting via _id vulnerability<= 2.8.703/05/2024
- Improper Authorization via woolentor_template_store vulnerability<= 2.8.119/04/2024
- Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget vulnerability<= 2.8.405/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout vulnerability<= 2.8.304/04/2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link vulnerability<= 2.8.114/03/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 2.6.205/07/2023
- CSRF Leading to Plugin Settings Change Vulnerability<= 2.5.106/02/2023
- Contributor+ Stored XSS Vulnerability< 2.5.430/01/2023
- PHP Object Injection Vulnerability< 2.5.430/01/2023
- Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities<= 1.8.513/04/2021