Devitemsllc vulnerabilities

Products

• Ht Mega Addons For Elementor – Elementor Widgets & Template Builder 26
• Shoplentor – All-in-one Woocommerce Growth & Store Enhancement Plugin 23
• Ht Mega – Absolute Addons For Elementor 2

Newest

• devitemsllc ht mega addons for elementor – elementor widgets & template builder HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink CVE-2026-111318 5.4 MediumOctober 29, 2026
• devitemsllc ht mega addons for elementor – elementor widgets & template builder HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting CVE-2026-11895 6.4 MediumSeptember 30, 2026
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name CVE-2026-92554 6.1 MediumSeptember 18, 2026
• devitemsllc support genix – helpdesk, ai chatbot, knowledge base & customer support ticketing system Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token CVE-2026-19806 8.8 HighSeptember 1, 2026
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API CVE-2026-6020 7.2 HighAugust 5, 2026
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter CVE-2026-16811 4.9 MediumJuly 28, 2026
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter CVE-2026-16797 4.3 MediumJuly 28, 2026
• devitemsllc recurio – ultimate subscription for woocommerce Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter CVE-2026-12936 4.9 MediumJuly 8, 2026
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute CVE-2026-6287 5.4 MediumMay 27, 2026
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute CVE-2026-4059 6.4 MediumApril 14, 2026
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action CVE-2026-1714 8.6 HighFebruary 18, 2026
• devitemsllc ht mega addons for elementor – elementor widgets & template builder HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection CVE-2025-13141 6.4 MediumNovember 21, 2025
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template' CVE-2025-12493 9.8 CriticalNovember 4, 2025
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-11823 6.4 MediumOctober 25, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions CVE-2025-8068 4.3 MediumJuly 31, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure CVE-2025-8401 4.3 MediumJuly 31, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions CVE-2025-8151 4.3 MediumJuly 31, 2025
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter CVE-2025-3775 6.5 MediumApril 25, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2025-1802 6.4 MediumMarch 20, 2025
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flas… CVE-2025-1527 6.4 MediumMarch 12, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget CVE-2025-1261 6.4 MediumMarch 8, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-12599 6.4 MediumFebruary 11, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css CVE-2024-12597 6.4 MediumFebruary 4, 2025
• devitemsllc ht event – wordpress event manager plugin for elementor HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor CVE-2024-13216 4.3 MediumJanuary 31, 2025
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template CVE-2024-9538 4.3 MediumOctober 11, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id CVE-2024-8910 4.3 MediumSeptember 25, 2024
• devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin, hasthemes woolentor - woocommerce elementor addons \+ builder +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-8668 6.4 MediumSeptember 25, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2024-5215 6.4 MediumJune 26, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings CVE-2024-5173 6.4 MediumJune 26, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Hor… CVE-2024-5530 6.4 MediumJune 11, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4876 6.4 MediumMay 21, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification CVE-2024-4566 7.1 HighMay 21, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode CVE-2024-3345 6.4 MediumMay 21, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update CVE-2024-4875 Public exploit 4.3 MediumMay 21, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget CVE-2024-3990 6.4 MediumMay 9, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products CVE-2023-6327 5.3 MediumMay 9, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify CVE-2024-3989 6.4 MediumMay 9, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-3307 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget CVE-2024-2084 6.4 MediumMay 2, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store CVE-2023-7067 4.3 MediumMay 2, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id CVE-2024-3991 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products CVE-2023-6214 7.5 HighMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ CVE-2024-2790 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget CVE-2024-3308 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' CVE-2024-2085 6.4 MediumMay 2, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin, hasthemes woolentor-addons +2 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1057 6.4 MediumApril 20, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget CVE-2024-2946 6.4 MediumApril 9, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link CVE-2024-1960 6.4 MediumApril 9, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder, hasthemes ht mega - absolute addons for elementor page builder +2 more HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal CVE-2024-1974 8.8 HighApril 9, 2024
• hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 more ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal P… CVE-2024-2868 6.4 MediumApril 4, 2024
• Show olderLoading…