CVE-2022-46798: Hasthemes Woolentor - Woocommerce Elementor Addons + Builder

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings change.

Affected products

• Hasthemes Woolentor - Woocommerce Elementor Addons + Builder: before 2.5.2 (fixed in 2.5.2)

Published 2023-03-01. Last modified 2026-06-17.