Skip to content
OpenAdvisories

Vendor

devitemsllc

52 known vulnerabilities.

Products

HT Mega Addons for Elementor – Elementor Widgets & Template Builder 26 ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin 23 HT Event – WordPress Event Manager Plugin for Elementor 1 Recurio – Ultimate Subscription for WooCommerce 1 Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System 1
All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-2946

    ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget

    The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's QR Code Widget in all versions up to, and including, 2.8.4…

    devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin Web / CMS
  • Medium 6.4
    CVE-2024-1960

    ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link

    The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Special Offer Day Widget Banner Link in all versions up to, and inc…

    devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin Web / CMS
  • Medium 6.4
    CVE-2024-2868

    ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout

    The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slitems parameter in the WL Special Day Offer Widget in all version…

    devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin Web / CMS
  • Medium 6.4
    CVE-2024-1421

    HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget

    The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘border_type’ attribute of the Post Carousel widget in all versions up to, and including, 2.4.4 due to insufficient input sanitization and ou…

    devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder Web / CMS
  • Medium 6.4
    CVE-2024-1397

    HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag

    The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on the 'titleTag' user…

    devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder Web / CMS