CVE-2023-0232

CRITICAL 9.8CVE-2023-0232 · Published 21/02/2023 · updated 17/06/2026

In short

CVE-2023-0232 is a CRITICAL (CVSS 9.8) vulnerability affecting shoplentor (hasthemes).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.6% of all vulnerabilities.
Fix: update to 2.5.4 or later.

Package	Affected versions	Patched versions
shoplentor hasthemes	`< 2.5.4`	`2.5.4`

Description

The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.

References

plugins.trac.wordpress.org/changeset/2852711/woolentor-addons/trunk/includes/helper-function.php · Patch
wpscan.com/vulnerability/1885a708-0e8a-4f4c-8e26-069bebe9a518 · Exploit

More vulnerabilities in shoplentor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

shoplentor

hasthemes

< 2.5.4

2.5.4

More vulnerabilities in shoplentor

See all →