CVE-2025-1527

CVE-2025-1527 involves ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules (formerly WooLentor) for WordPress. The vulnerability is a stored DOM-based cross-site scripting flaw in the Flash Sale Countdown module present in all versions up to and including 3.1.0, caused by insuf...

WordPress plugin ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress plugin ShopLentor - WooCommerce Builder for...

WordPress ShopLentor plugin <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module vulnerability discovered by Webbernaut in WordPress Plugin ShopLentor versions = 3.1.0...