Threats tagged 'ghsa-rgx4-r686-q8hp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2025-12493The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) Critical9.82025-11-04GCVE DatabaseCVE-2025-12493 The ShopLentor WordPress plugin (formerly WooLentor) up to version 3.2.5 is vulnerable to a Local File Inclusion (LFI) flaw via the 'load_template' function. This vulnerability allows unauthenticated attackers to include and execute arbitrary PHP files on the server, potentially leading to full code execution, bypass of access controls, and exposure of sensitive data. Report on CVE-2025-12493 Vulnerability CWE-22 #ghsa-rgx4-r686-q8hp	GCVE Database	2025-11-04

Page 1 of 1