CVE-2025-1527

CVE-2025-1527 involves ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules (formerly WooLentor) for WordPress. The vulnerability is a stored DOM-based cross-site scripting flaw in the Flash Sale Countdown module present in all versions up to and including 3.1.0, caused by insuf...

WordPress plugin ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress plugin ShopLentor - WooCommerce Builder for...

CVE-2025-1527: Improper Neutralization of Input During Web Page Generation

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution formerly WooLentor plugin for WordPress is vulnerable to a Stored DOM-Based Cross-Site Scripting via the plugin's Flash Sale Countdown module in all versions up to, and including, 3.1.0 due to...

PT-2025-11030

Name of the Vulnerable Software and Affected Versions: The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution plugin for WordPress versions up to, and including, 3.1.0 Description: The issue is related to a Stored DOM-Based Cross-Site Scripting...

WordPress ShopLentor plugin <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module vulnerability discovered by Webbernaut in WordPress Plugin ShopLentor versions = 3.1.0...