Vulnerabilities / ShopLentor
ShopLentor vulnerabilities
Advisories WPSec published for ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin. Other sources may list more. Its attack surface: ShopLentor on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-12 | WPSEC-2026-2863 | ShopLentor <= 3.5.7 - Unauthenticated Arbitrary Shortcode Execution via Gutenberg Template Rendering | Medium 6.5 | 3.5.8 |
| 2026-11-12 | WPSEC-2026-2862 | ShopLentor <= 3.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Free Shipping Bar Shortcode Attributes | Medium 6.4 | 3.5.8 |
License: CC BY 4.0