ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin vulnerabilities
4 known vulnerabilities in ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin from Devitemsllc. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
ShopLentor – All-in-One WooCommerce Growth &…: Use of Externally-Controlled Input to Select Classes or Code
The ShopLentor plugin for WordPress is vulnerable to arbitrary function execution via the woolentoropt/v1/custom-action REST API endpoint in all versions up to, and including, 3.3.7. This is due to the handle_action() method passing user-supplied input directl
- 8.6 High severity
ShopLentor – All-in-One WooCommerce Growth &…: Improper Neutralization of CRLF Sequences
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and including, 3.3.2. This is due to the lack of validation on the 'send_to', 'produ
- 9.8 Critical severity
ShopLentor – All-in-One WooCommerce Growth &…: Improper Limitation of a Pathname to a Restricted Directory
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the 'load_template' function. This
- 7.1 High severity
ShopLentor – All-in-One WooCommerce Growth &…: Missing Authorization
The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with contribu