Hasthemes Woolentor - Woocommerce Elementor Addons + Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Hasthemes Woolentor - Woocommerce Elementor Addons + Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-8668 — CVSS 6.4 (medium): The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for…
• CVE-2021-24262 — CVSS 5.4 (medium): The “WooLentor – WooCommerce Elementor Addons + Builder” WordPress Plugin before 1.8.6 has a widget that is vulnerable to stored…
• CVE-2022-46798 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings change.
• CVE-2022-47172 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.6.2 versions.