{"items":[{"id":"CVE-2026-111318","published":"2026-10-29T09:25:37.098Z","updated":"2026-10-29T10:35:36.425Z","title":"HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink","severity":"MEDIUM","score":5.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-11895","published":"2026-09-30T07:41:05.273Z","updated":"2026-09-30T15:28:11.362Z","title":"HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2026-92554","published":"2026-09-18T07:39:59.000Z","updated":"2026-09-19T14:21:52.320Z","title":"ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name","severity":"MEDIUM","score":6.1,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2026-19806","published":"2026-09-01T04:27:49.216Z","updated":"2026-09-02T17:53:01.887Z","title":"Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token","severity":"HIGH","score":8.8,"vendor":"devitemsllc","product":"Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2026-6020","published":"2026-08-05T07:39:20.379Z","updated":"2026-08-05T14:17:21.846Z","title":"ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API","severity":"HIGH","score":7.2,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2026-16811","published":"2026-07-28T05:39:44.419Z","updated":"2026-07-28T13:30:49.041Z","title":"ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter","severity":"MEDIUM","score":4.9,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2026-16797","published":"2026-07-28T05:39:43.219Z","updated":"2026-07-28T12:59:11.414Z","title":"ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2026-12936","published":"2026-07-08T11:30:32.777Z","updated":"2026-07-08T13:27:42.982Z","title":"Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter","severity":"MEDIUM","score":4.9,"vendor":"devitemsllc","product":"Recurio – Ultimate Subscription for WooCommerce","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2026-6287","published":"2026-05-27T04:29:00.403Z","updated":"2026-05-27T10:40:57.768Z","title":"ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute","severity":"MEDIUM","score":5.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-4059","published":"2026-04-14T03:37:33.893Z","updated":"2026-04-14T14:04:52.486Z","title":"ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2026-1714","published":"2026-02-18T04:35:45.965Z","updated":"2026-04-08T17:24:37.106Z","title":"ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action","severity":"HIGH","score":8.6,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2025-13141","published":"2025-11-21T08:28:13.807Z","updated":"2026-04-08T17:05:55.825Z","title":"HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2025-12493","published":"2025-11-04T11:19:27.403Z","updated":"2026-04-08T16:36:30.320Z","title":"ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'","severity":"CRITICAL","score":9.8,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00815,"kevAdded":null},{"id":"CVE-2025-11823","published":"2025-10-25T04:22:44.973Z","updated":"2026-04-08T16:44:09.355Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2025-8068","published":"2025-07-31T11:19:13.164Z","updated":"2026-04-08T17:27:13.733Z","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2025-8401","published":"2025-07-31T11:19:12.771Z","updated":"2026-04-08T17:10:01.120Z","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2025-8151","published":"2025-07-31T11:19:12.200Z","updated":"2026-04-08T16:58:59.318Z","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2025-3775","published":"2025-04-25T04:23:04.940Z","updated":"2026-04-08T16:51:38.675Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter","severity":"MEDIUM","score":6.5,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2025-1802","published":"2025-03-20T11:11:27.417Z","updated":"2026-04-08T16:58:26.689Z","title":"HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2025-1527","published":"2025-03-12T11:13:32.596Z","updated":"2026-04-08T17:25:32.681Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.0026,"kevAdded":null},{"id":"CVE-2025-1261","published":"2025-03-08T01:44:27.321Z","updated":"2026-04-08T17:29:50.857Z","title":"HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2024-12599","published":"2025-02-11T04:21:22.020Z","updated":"2026-06-03T14:27:15.474Z","title":"HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2024-12597","published":"2025-02-04T06:41:53.233Z","updated":"2026-04-08T16:37:32.183Z","title":"HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2024-13216","published":"2025-01-31T05:22:32.906Z","updated":"2026-04-08T16:36:56.336Z","title":"HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"HT Event – WordPress Event Manager Plugin for Elementor","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2024-9538","published":"2024-10-11T11:01:55.139Z","updated":"2026-04-08T16:58:58.869Z","title":"ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2024-8910","published":"2024-09-25T06:48:59.659Z","updated":"2026-04-08T16:34:34.405Z","title":"HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00309,"kevAdded":null},{"id":"CVE-2024-8668","published":"2024-09-25T04:30:27.952Z","updated":"2026-04-08T17:15:42.449Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2024-5215","published":"2024-06-26T06:56:03.593Z","updated":"2026-04-08T17:04:55.632Z","title":"HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2024-5173","published":"2024-06-26T02:07:56.481Z","updated":"2026-04-08T17:14:27.991Z","title":"HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2024-5530","published":"2024-06-11T04:32:12.795Z","updated":"2026-04-08T16:48:15.905Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2024-4876","published":"2024-05-21T11:02:28.418Z","updated":"2026-04-08T16:46:50.289Z","title":"HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2024-3345","published":"2024-05-21T08:31:04.853Z","updated":"2026-04-08T17:26:24.136Z","title":"ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2024-4566","published":"2024-05-21T08:31:04.348Z","updated":"2026-04-08T17:21:14.612Z","title":"ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification","severity":"HIGH","score":7.1,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2024-4875","published":"2024-05-21T08:31:03.732Z","updated":"2026-04-08T17:19:02.105Z","title":"HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00755,"kevAdded":null},{"id":"CVE-2024-3990","published":"2024-05-09T20:03:35.304Z","updated":"2026-04-08T17:10:46.470Z","title":"HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2023-6327","published":"2024-05-09T20:03:21.876Z","updated":"2026-04-08T16:42:39.022Z","title":"ShopLentor (formerly WooLentor)  <= 2.8.7 - Missing Authorization via purchased_new_products","severity":"MEDIUM","score":5.3,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.0067,"kevAdded":null},{"id":"CVE-2024-3989","published":"2024-05-09T20:03:17.834Z","updated":"2026-04-08T16:33:03.151Z","title":"HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-3307","published":"2024-05-02T16:52:37.182Z","updated":"2026-04-08T17:21:33.109Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2024-2084","published":"2024-05-02T16:52:23.686Z","updated":"2026-04-08T17:06:20.862Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2023-7067","published":"2024-05-02T16:52:20.896Z","updated":"2026-04-08T17:04:42.659Z","title":"ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store","severity":"MEDIUM","score":4.3,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-3991","published":"2024-05-02T16:52:08.334Z","updated":"2026-04-08T16:53:39.029Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2023-6214","published":"2024-05-02T16:52:07.346Z","updated":"2026-04-08T16:53:13.788Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products","severity":"HIGH","score":7.5,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00614,"kevAdded":null},{"id":"CVE-2024-2790","published":"2024-05-02T16:52:06.878Z","updated":"2026-04-08T16:52:53.583Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-3308","published":"2024-05-02T16:51:57.833Z","updated":"2026-04-08T16:45:32.221Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2024-2085","published":"2024-05-02T16:51:45.471Z","updated":"2026-04-08T16:35:46.416Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-1057","published":"2024-04-20T01:56:38.442Z","updated":"2026-04-08T17:17:32.080Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-2946","published":"2024-04-09T18:59:25.791Z","updated":"2026-04-08T17:26:58.565Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-1960","published":"2024-04-09T18:58:42.909Z","updated":"2026-04-08T16:45:23.770Z","title":"ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2024-1974","published":"2024-04-09T18:58:34.032Z","updated":"2026-04-08T16:36:16.389Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal","severity":"HIGH","score":8.8,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.01214,"kevAdded":null},{"id":"CVE-2024-2868","published":"2024-04-04T01:56:45.161Z","updated":"2026-04-08T16:42:58.092Z","title":"ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2024-1421","published":"2024-03-12T22:32:26.560Z","updated":"2026-04-08T17:13:36.723Z","title":"HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-1397","published":"2024-03-12T22:32:26.001Z","updated":"2026-04-08T17:05:44.354Z","title":"HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag","severity":"MEDIUM","score":6.4,"vendor":"devitemsllc","product":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder","kev":false,"epss":0.00478,"kevAdded":null}]}