CVE-2025-3775 – ShopLentor WooCommerce Builder SSRF Vulnerability

April 25, 2025

CVE ID : CVE-2025-3775

Published : April 25, 2025, 5:15 a.m. | 2 hours, 15 minutes ago

Description : The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.2 via the woolentor_template_proxy function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application, and can be used to query and modify information from internal services.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-46599 – K3s Kubernetes Kubelet ReadWritePort Remote Authentication Bypass

Next Article CVE-2025-3752 – Able Player WordPress Stored Cross-Site Scripting Vulnerability

How To Prevent WordPress SQL Injection Attacks

Creating The “Moving Highlight” Navigation Bar With JavaScript And CSS

Databricks adds new tools like Lakebase, Lakeflow Designer, and Agent Bricks to better support building AI apps and agents in the enterprise

Zencoder launches end-to-end UI testing agent

NVIDIA chief rebuffs Anthropic’s AI slashing 50% of entry-level white collar jobs from Gen Z claim: “He thinks AI is so scary, but only they should do it.”

OpenAI shifts to Google for cloud computing support as Microsoft partnership falters, despite Sam Altman’s “compute-sufficient” claim

Clair Obscur: Expedition 33 now lets you rematch the game’s most brutal boss

The Alters PC review: I’m rethinking my own life paths after falling in love with a sci-fi game

SVAR Svelte Filter: Visual Query Builder for Data-Driven Apps

SVAR Svelte Filter: Visual Query Builder for Data-Driven Apps

Developing a Serverless Blogging Platform with AWS Lambda and Python

YAML files in DBT

NVIDIA chief rebuffs Anthropic’s AI slashing 50% of entry-level white collar jobs from Gen Z claim: “He thinks AI is so scary, but only they should do it.”

NVIDIA chief rebuffs Anthropic’s AI slashing 50% of entry-level white collar jobs from Gen Z claim: “He thinks AI is so scary, but only they should do it.”

OpenAI shifts to Google for cloud computing support as Microsoft partnership falters, despite Sam Altman’s “compute-sufficient” claim

Clair Obscur: Expedition 33 now lets you rematch the game’s most brutal boss

CVE-2025-3775 – ShopLentor WooCommerce Builder SSRF Vulnerability

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction

Graphite spyware used in Apple iOS zero-click attacks on journalists

You can get a Call of Duty: Black Ops 7 themed reward in Black Ops 6 right now, but you have to be quick

Laravel Toaster Magic

Proxy-FDA: Proxy-Based Feature Distribution Alignment for Fine-Tuning Vision Foundation Models Without Forgetting

CVE-2025-32441 – Rack Session Pool Session Hijacking Vulnerability

Novels That Offer Peace After Long Days

CVE-2025-4254 – PCMan FTP Server Buffer Overflow Vulnerability

Mastering Stratego, the classic game of imperfect information

I managed to buy a Nintendo Switch 2 – and it’s easy to see why it’s flying off shelves

CVE-2025-3775 – ShopLentor WooCommerce Builder SSRF Vulnerability

Related Posts