WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
woolentor-addons
Published
2021-04-13
Title
WooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2023-01-28
Title
ShopLentor < 2.5.4 - PHP Object Injection
Slug
woolentor-addons
Published
2023-01-28
Title
ShopLentor < 2.5.4 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2023-02-06
Title
ShopLentor < 2.5.2 - Settings Update via CSRF
Slug
woolentor-addons
Published
2023-07-05
Title
ShopLentor < 2.6.3 - Settings Update via CSRF
Slug
woolentor-addons
Published
2024-03-14
Title
ShopLentor < 2.8.2 - Contributor+ Stored Cross-Site Scripting via Banner Link
Slug
woolentor-addons
Published
2024-04-03
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout
Slug
woolentor-addons
Published
2024-04-04
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.5 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget
Slug
woolentor-addons
Published
2024-04-18
Title
ShopLentor < 2.8.2 - Contributor+ Template Reset
Slug
woolentor-addons
Published
2024-04-19
Title
ShopLentor < 2.8.2 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2024-05-02
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.8.8 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2024-05-03
Title
ShopLentor (formerly WooLentor) < 2.8.8 - Missing Authorization
Slug
woolentor-addons
Published
2024-05-20
Title
ShopLentor < 2.8.9 - Authenticated Option Update
Slug
woolentor-addons
Published
2024-05-20
Title
ShopLentor < 2.8.9 - Contributor+ Stored XSS via woolentorsearch Shortcode
Slug
woolentor-addons
Published
2024-05-17
Title
ShopLentor < 2.8.8 - Contributor+ Stored XSS
Slug
woolentor-addons
Published
2024-06-10
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget
Slug
woolentor-addons
Published
2024-09-24
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) < 2.9.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
woolentor-addons
Published
2024-10-10
Title
ShopLentor < 2.9.9 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
Slug
woolentor-addons
Published
2025-03-11
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) < 3.1.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module
Slug
woolentor-addons
Published
2025-04-24
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) < 3.1.3 - Unauthenticated Server-Side Request Forgery via URL Parameter
Slug
woolentor-addons
Published
2025-09-09
Title
ShopLentor < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
woolentor-addons
Published
2025-10-24
Title
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
woolentor-addons
Published
2025-11-03
Title
ShopLentor < 3.2.6 - Unauthenticated Local File Inclusion via 'load_template'
Slug
woolentor-addons
Published
2026-02-17
Title
ShopLentor < 3.3.3 - Unauthenticated Email Relay Abuse
Slug
woolook
Published
2024-12-11
Title
Woolook <= 1.7.0 - Unauthenticated Local File Inclusion