Devitemsllc vulnerabilities
We track 6 vulnerabilities in Devitemsllc products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 1, 2026.
Latest Devitemsllc vulnerabilities
- 8.8 High severity
Support Genix – Helpdesk, AI Chatbot…: Improper Authentication
The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the `guest_ticke
- 7.2 High severity
ShopLentor – All-in-One WooCommerce Growth &…: Use of Externally-Controlled Input to Select Classes or Code
The ShopLentor plugin for WordPress is vulnerable to arbitrary function execution via the woolentoropt/v1/custom-action REST API endpoint in all versions up to, and including, 3.3.7. This is due to the handle_action() method passing user-supplied input directl
- 8.6 High severity
ShopLentor – All-in-One WooCommerce Growth &…: Improper Neutralization of CRLF Sequences
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and including, 3.3.2. This is due to the lack of validation on the 'send_to', 'produ
- 9.8 Critical severity
ShopLentor – All-in-One WooCommerce Growth &…: Improper Limitation of a Pathname to a Restricted Directory
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the 'load_template' function. This
- 7.1 High severity
ShopLentor – All-in-One WooCommerce Growth &…: Missing Authorization
The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with contribu
- 7.5 High severity
HT Mega Addons for Elementor – Elementor…: Exposure of Sensitive Information to an Unauthorized Actor
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.6 via the purchased_products function. This makes it possible for unauthenticatied attackers to extract s