Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: devitemsllc Component: Woolentor - Woocommerce Elementor Addons + Builder Clear all filters
TI-2024-08041 CVE-2024-8668 · GHSA-r9fv-vpgh-mfpg

Cross-site scripting in devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store…

Priority LOW 29

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tooltip and countdown functi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00392 Published 2024-09-25 No fix listed CWE-79
TI-2021-06554 CVE-2021-24262 · GHSA-3mmh-h28h-wgxq

WooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS

Priority LOW 25

The “WooLentor – WooCommerce Elementor Addons + Builder” WordPress Plugin before 1.8.6 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a simila…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0059 Published 2021-05-05 Fixed in 1.8.6 CWE-79