WordPress plugin
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 30 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High3
- Medium25
- Low0
All ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API ≤3.3.7Update to 3.3.8 | CVE-2026-6020 | |
| High8.6 | Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action ≤3.3.2Update to 3.3.3 | CVE-2026-1714 | |
| Critical9.8 | Unauthenticated Local PHP File Inclusion via 'load_template' ≤3.2.5Update to 3.2.6 | CVE-2025-12493 | |
| High7.1 | Missing Authorization to WordPress Option Modification ≤2.8.8Update to 2.8.9 | CVE-2024-4566 | |
| Critical9.8 | PHP Object Injection ≤2.5.3Update to 2.5.4 | CVE-2023-0232 |
- High7.2Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API
≤3.3.7Update to 3.3.8
- High8.6Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action
≤3.3.2Update to 3.3.3
- Critical9.8Unauthenticated Local PHP File Inclusion via 'load_template'
≤3.2.5Update to 3.2.6
- High7.1Missing Authorization to WordPress Option Modification
≤2.8.8Update to 2.8.9
- Critical9.8PHP Object Injection
≤2.5.3Update to 2.5.4
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin: common questions
Does ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 30 known vulnerabilities in ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin: 2 critical, 3 high, 25 medium. None are known to affect version null.
How do I check which version of ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin vulnerability?
CVE-2026-92554, published Sep 17, 2026: ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name. Severity: Medium (CVSS 6.1).
Is any ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin vulnerability listed in CISA KEV?
No. None of the known ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin vulnerabilities is currently listed in the CISA KEV catalog.