devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin.

ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Code injection

ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• SQL injection

ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Broken access control

ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Other injection

ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Path traversal

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Server-side request forgery (SSRF)

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Fla…

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Information disclosure

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Ho…

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Broken access control

ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Broken access control

ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Broken access control

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal…

• devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
• Cross-site scripting (XSS)