Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-92554— ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name

Quick assessment

Affected
devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ShopLentor – 针对 WordPress 的 All-in-One WooCommerce 增长与商店增强插件，在所有 3.5.1 及之前版本中存在反射型跨站脚本（XSS）漏洞。该漏洞源于对查询字符串参数名称的输入过滤不足以及输出转义不当。 这使得未经身份验证的攻击者能够通过在页面中注入任意 Web 脚本，诱骗用户执行特定操作（例如点击链接），从而在目标用户的浏览器中执行这些恶意脚本。 该漏洞通过“WL: Product Horizontal Filter”（产品横向筛选）小部件触发。该小部件会将当前 U

CVSS 6.1 · Medium EPSS 0.37% · P28

Affected Version Matrix 1

VendorProduct Version RangeStatus
devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin ≤ 3.5.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-92554

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name
Source: CVE Program / CVE List V5
Vulnerability Description
The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. The vulnerability is triggered via the WL: Product Horizontal Filter widget, which reflects attacker-supplied query-string parameter names from the current URL into option element value attributes without escaping, allowing payload breakout from the value="..." attribute context.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin 0 ~ 3.5.1 -

II. Public POCs for CVE-2026-92554

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-92554

请登录查看更多情报信息。

Other References for CVE-2026-92554 (2)

IV. Related Vulnerabilities

Same product: ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
Same vendor: devitemsllc
Same weakness: CWE-79

V. Comments for CVE-2026-92554

No comments yet

Leave a comment