CVE Catalog
CVE-2026-61973
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
The ShopLentor Pro plugin versions 2.8.5 and earlier have a broken access control vulnerability exploitable by Subscriber-level users.
Risk Assessment
A low-privileged user can access functions or data intended for administrators, potentially leading to privilege escalation.
Recommendation
Update ShopLentor Pro to version 2.8.6 or later.
Other vulnerabilities in ShopLentor Pro
Original NVD description (English source)
Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS