Description
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings change.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HasThemes | ShopLentor | ≤ 2.5.1 | — |
Medium · 5.4
CVE-2022-46798
EUVD-2022-49580GHSA-c676-fgpq-52cf
WordPress WooLentor Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
Published Mar 1, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack