CVE-2022-46798 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor…

Description

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings change.

Affected products and versions

Product	Affected versions	Fixed in
ShopLentor 2.5	earliest → 2.5.1	No fix stated

Other CVEs of ShopLentor

The 4 CVEs of ShopLentor →

CVE-2024-5530 The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor)… 6.4 Medium CVE-2024-34767 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HasThemes… 6.5 Medium CVE-2022-47172 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.6.2 versions 4.3 Medium