devitemsllc vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 202510
3. 202528
4. 202611

Newest CVEs

• CVE-2026-111318

  HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink

  devitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder

  Medium5.4
• CVE-2026-11895

  HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting

  devitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder

  Medium6.4
• CVE-2026-92554

  ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name

  devitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

  Medium6.1
• CVE-2026-19806

  Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token

  devitemsllc · Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System

  High8.8
• CVE-2026-6020

  ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API

  devitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

  High7.2
• CVE-2026-16811

  ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

  devitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

  Medium4.9
• CVE-2026-16797

  ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter

  devitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

  Medium4.3
• CVE-2026-12936

  Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter

  devitemsllc · Recurio – Ultimate Subscription for WooCommerce

  Medium4.9
• CVE-2026-6287

  ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute

  devitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

  Medium5.4
• CVE-2026-4059

  ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute

  devitemsllc · ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

  Medium6.4