ShopLento Authenticated SQL Injection via orderby Parameter (CVE-2026-16811)

Vulnerability Overview Vulnerability Name: ShopLento <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter CVE Number: CVE-2026-16811 CVSS Score: 4.9 (Medium) Publication Date: July 27, 2026 Last Update Date: July 28, 2026 Researcher: Wordfence PRISM - Wordfence Impact Scope Affected Versions: ShopLento <= 3.4.5 Vulnerability Type: SQL Injection Attack Requirements: Administrator privileges required Remediation Fixed Version: Upgrade to version 3.4.6 or later Additional Information Vulnerability Description: The ShopLento plugin contains a time-based SQL injection vulnerability in the parameter, allowing authenticated attackers with administrator-level access to append additional SQL queries to existing ones, thereby extracting sensitive information from the database. Reference Links: - plugins.trac.wordpress.org - plugins.trac.wordpress.org - plugins.trac.wordpress.org - plugins.trac.wordpress.org Related Recent Vulnerabilities ShopLento <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via optionSelect Parameter - CVE Number: CVE-2026-16797 - CVSS Score: 4.3 - Researcher: Wordfence PRISM - Date: July 27, 2026 ShopLento - WooCommerce Builder for Elementor & Gutenberg <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute - CVE Number: CVE-2026-6287 - CVSS Score: 5.4 - Researcher: ammonia - Date: May 26, 2026 ShopLento <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute - CVE Number: CVE-2026-4059 - CVSS Score: 6.4 - Researcher: zeim - Date: April 13, 2026 ShopLento <= 3.2.2 - Unauthenticated Email Relay Abuse via woocommerce_suggest_price_action AJAX Action - CVE Number: CVE-2026-1714 - CVSS Score: 8.6 - Researcher: Teerachai Somprasong - Date: February 17, 2026 ShopLento <= 3.2.5 - Unauthenticated Local PHP-File Inclusion via 'load_Template' - CVE Number: CVE-2025-12493 - CVSS Score: 9.8 - Researcher: mkmyers - Date: November 3, 2025 ShopLento - WooCommerce Builder for Elementor & Gutenberg <21 Modules - All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode - CVE Number: CVE-2025-11823 - CVSS Score: 6.4 - Researcher: thiviper17y - Date: October 24, 2025 ShopLento <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting - CVE Number: CVE-2025-58990 - CVSS Score: 6.4 - Researcher: Denver Jackson - Date: September 9, 2025 ShopLento - WooCommerce Builder for Elementor & Gutenberg <20 Modules - All in One Solution (formerly WooLento) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter - CVE Number: CVE-2025-3775 - CVSS Score: 6.5 - Researcher: mkmyers - Date: April 24, 2025 ShopLento - WooCommerce Builder for Elementor & Gutenberg <20 Modules - All in One Solution (formerly WooLento) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module - CVE Number: CVE-2025-1527 - CVSS Score: 6.4 - Researcher: Webbenaut - Date: March 11, 2025 ShopLento <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL-FAQ Widget Elementor Template - CVE Number: CVE-2024-9538 - CVSS Score: 4.3 - Researcher: Ankit Patel - Date: October 10, 2024 Summary The ShopLento plugin contains an SQL injection vulnerability in the parameter, affecting versions 3.4.5 and below. It is recommended to upgrade to version 3.4.6 or later to patch this vulnerability. Additionally, the plugin has multiple other security vulnerabilities; timely updates are advised to ensure website security.

Goal Reached Thanks to every supporter — we hit 100%!

ShopLento Authenticated SQL Injection via orderby Parameter (CVE-2026-16811)

More from this source