Access violation vulnerability in ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) 2.8.8

The ShopLentor plugin for WordPress has a security flaw that allows unauthorized changes to be made to the data. This happens because the plugin does not have a check in place to ensure only certain users can access a specific function. This means that attackers who are logged in with at least contributor-level access can change certain WordPress settings to “true”. It is also possible for attackers with subscriber- or customer-level access to exploit this vulnerability if the WooCommerce plugin is not active or if they have been given explicit access to the WordPress admin dashboard.