Plugin icon

ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

woolentor-addons

Vulnerabilities:

24

Last Updated:

March 29, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-02-17
Title
ShopLentor < 3.3.3 - Unauthenticated Email Relay Abuse
Fixed in
Fixed in 3.3.3
CVSS
7.5 (high)
Published
2025-11-03
Title
ShopLentor < 3.2.6 - Unauthenticated Local File Inclusion via 'load_template'
Fixed in
Fixed in 3.2.6
CVSS
8.1 (high)
Published
2025-10-24
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.2.5
CVSS
6.4 (medium)
Published
2025-09-09
Title
ShopLentor < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.1
CVSS
6.4 (medium)
Published
2025-04-24
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) < 3.1.3 - Unauthenticated Server-Side Request Forgery via URL Parameter
Fixed in
Fixed in 3.1.3
CVSS
6.5 (medium)
Published
2025-03-11
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) < 3.1.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module
Fixed in
Fixed in 3.1.1
CVSS
6.4 (medium)
Published
2024-10-10
Title
ShopLentor < 2.9.9 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
Fixed in
Fixed in 2.9.9
CVSS
4.3 (medium)
Published
2024-09-24
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.9.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 2.9.8
CVSS
6.4 (medium)
Published
2024-06-10
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget
Fixed in
Fixed in 2.9.1
CVSS
6.4 (medium)
Published
2024-05-20
Title
ShopLentor < 2.8.9 - Authenticated Option Update
Fixed in
Fixed in 2.8.9
CVSS
5.5 (medium)
Published
2024-05-20
Title
ShopLentor < 2.8.9 - Contributor+ Stored XSS via woolentorsearch Shortcode
Fixed in
Fixed in 2.8.9
CVSS
5.9 (medium)
Published
2024-05-17
Title
ShopLentor < 2.8.8 - Contributor+ Stored XSS
Fixed in
Fixed in 2.8.8
CVSS
5.9 (medium)
Published
2024-05-03
Title
ShopLentor (formerly WooLentor) < 2.8.8 - Missing Authorization
Fixed in
Fixed in 2.8.8
CVSS
5.3 (medium)
Published
2024-05-02
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.8 - Contributor+ Stored XSS
Fixed in
Fixed in 2.8.8
CVSS
6.4 (medium)
Published
2024-04-19
Title
ShopLentor < 2.8.2 - Contributor+ Stored XSS
Fixed in
Fixed in 2.8.2
CVSS
5.9 (medium)
Published
2024-04-18
Title
ShopLentor < 2.8.2 - Contributor+ Template Reset
Fixed in
Fixed in 2.8.2
CVSS
2.7 (low)
Published
2024-04-04
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.5 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget
Fixed in
Fixed in 2.8.5
CVSS
6.4 (medium)
Published
2024-04-03
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout
Fixed in
Fixed in 2.8.4
CVSS
6.4 (medium)
Published
2024-03-14
Title
ShopLentor < 2.8.2 - Contributor+ Stored Cross-Site Scripting via Banner Link
Fixed in
Fixed in 2.8.2
CVSS
6.4 (medium)
Published
2023-07-05
Title
ShopLentor < 2.6.3 - Settings Update via CSRF
Fixed in
Fixed in 2.6.3
CVSS
4.3 (medium)
Published
2023-02-06
Title
ShopLentor < 2.5.2 - Settings Update via CSRF
Fixed in
Fixed in 2.5.2
CVSS
4.3 (medium)
Published
2023-01-28
Title
ShopLentor < 2.5.4 - Contributor+ Stored XSS
Fixed in
Fixed in 2.5.4
CVSS
6.8 (medium)
Published
2023-01-28
Title
ShopLentor < 2.5.4 - PHP Object Injection
Fixed in
Fixed in 2.5.4
CVSS
6.5 (medium)
Published
2021-04-13
Title
WooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS
Fixed in
Fixed in 1.8.6
CVSS
6.8 (medium)