SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-61973

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Summary

The ShopLentor Pro plugin versions 2.8.5 and earlier have a broken access control vulnerability exploitable by Subscriber-level users.

Risk Assessment

A low-privileged user can access functions or data intended for administrators, potentially leading to privilege escalation.

Recommendation

Update ShopLentor Pro to version 2.8.6 or later.

Other vulnerabilities in ShopLentor Pro

Original NVD description (English source)

Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS