agentprime: devitemsllc-shoplentor-all-in-one-woocommerce-growth-store-enhancement-pluginEvery new CVE for devitemsllc-shoplentor-all-in-one-woocommerce-growth-store-enhancement-plugin.https://agentprime.io/CVE-2026-92554: ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Namehttps://agentprime.io/advisories/CVE-2026-92554/https://agentprime.io/advisories/CVE-2026-92554/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 07:39:59 GMTCVECVE-2026-6020: ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST APIhttps://agentprime.io/advisories/CVE-2026-6020/https://agentprime.io/advisories/CVE-2026-6020/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 07:39:20 GMTCVECVE-2026-16811: ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameterhttps://agentprime.io/advisories/CVE-2026-16811/https://agentprime.io/advisories/CVE-2026-16811/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 05:39:44 GMTCVECVE-2026-16797: ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameterhttps://agentprime.io/advisories/CVE-2026-16797/https://agentprime.io/advisories/CVE-2026-16797/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 05:39:43 GMTCVECVE-2026-6287: ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attributehttps://agentprime.io/advisories/CVE-2026-6287/https://agentprime.io/advisories/CVE-2026-6287/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 04:29:00 GMTCVECVE-2026-4059: ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-4059/https://agentprime.io/advisories/CVE-2026-4059/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Apr 2026 03:37:33 GMTCVECVE-2026-1714: ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Actionhttps://agentprime.io/advisories/CVE-2026-1714/https://agentprime.io/advisories/CVE-2026-1714/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 04:35:45 GMTCVECVE-2025-12493: ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'https://agentprime.io/advisories/CVE-2025-12493/https://agentprime.io/advisories/CVE-2025-12493/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 11:19:27 GMTCVEcriticalCVE-2025-11823: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2025-11823/https://agentprime.io/advisories/CVE-2025-11823/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Oct 2025 04:22:44 GMTCVECVE-2025-3775: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameterhttps://agentprime.io/advisories/CVE-2025-3775/https://agentprime.io/advisories/CVE-2025-3775/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Apr 2025 04:23:04 GMTCVECVE-2025-1527: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Fla…https://agentprime.io/advisories/CVE-2025-1527/https://agentprime.io/advisories/CVE-2025-1527/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Mar 2025 11:13:32 GMTCVECVE-2024-9538: ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Templatehttps://agentprime.io/advisories/CVE-2024-9538/https://agentprime.io/advisories/CVE-2024-9538/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Oct 2024 11:01:55 GMTCVECVE-2024-8668: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-8668/https://agentprime.io/advisories/CVE-2024-8668/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Sep 2024 04:30:27 GMTCVECVE-2024-5530: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Ho…https://agentprime.io/advisories/CVE-2024-5530/https://agentprime.io/advisories/CVE-2024-5530/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Jun 2024 04:32:12 GMTCVECVE-2024-3345: ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcodehttps://agentprime.io/advisories/CVE-2024-3345/https://agentprime.io/advisories/CVE-2024-3345/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 08:31:04 GMTCVECVE-2024-4566: ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modificationhttps://agentprime.io/advisories/CVE-2024-4566/https://agentprime.io/advisories/CVE-2024-4566/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 08:31:04 GMTCVECVE-2023-6327: ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_productshttps://agentprime.io/advisories/CVE-2023-6327/https://agentprime.io/advisories/CVE-2023-6327/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 May 2024 20:03:21 GMTCVECVE-2023-7067: ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_storehttps://agentprime.io/advisories/CVE-2023-7067/https://agentprime.io/advisories/CVE-2023-7067/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:20 GMTCVECVE-2024-3991: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _idhttps://agentprime.io/advisories/CVE-2024-3991/https://agentprime.io/advisories/CVE-2024-3991/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:08 GMTCVECVE-2024-1057: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1057/https://agentprime.io/advisories/CVE-2024-1057/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 Apr 2024 01:56:38 GMTCVECVE-2024-2946: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widgethttps://agentprime.io/advisories/CVE-2024-2946/https://agentprime.io/advisories/CVE-2024-2946/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:25 GMTCVECVE-2024-1960: ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Linkhttps://agentprime.io/advisories/CVE-2024-1960/https://agentprime.io/advisories/CVE-2024-1960/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:42 GMTCVECVE-2024-2868: ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal…https://agentprime.io/advisories/CVE-2024-2868/https://agentprime.io/advisories/CVE-2024-2868/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 01:56:45 GMTCVE