CVE Catalog

CVE-2026-61972

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Summary

The ShopLentor Pro plugin versions 2.8.5 and earlier have an unauthenticated broken access control vulnerability.

Risk Assessment

An unauthenticated attacker can access protected functions or data, potentially leading to unauthorized actions in the system.

Recommendation

Update ShopLentor Pro to version 2.8.6 or later.

Other vulnerabilities in ShopLentor Pro

Original NVD description (English source)

Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS