ShopLentor vulnerabilities

2 known vulnerabilities in ShopLentor from HasThemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ShopLentor – All-in-One WooCommerce Growth &…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-12493Nov 4, 2025Devitemsllc

  The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the 'load_template' function. This

• 7.1 High severity

  ShopLentor – All-in-One WooCommerce Growth &…: Missing Authorization

  CVE-2024-4566May 21, 2024Devitemsllc

  The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with contribu