CVE-2025-11823 | devitemsllc ShopLentor Plugin up to 3.2.4 on WordPress wishsuite_button button_exist_text cross site scripting

October 25, 2025 Yanac

A vulnerability classified as problematic was found in devitemsllc ShopLentor Plugin up to 3.2.4 on WordPress. This affects the function wishsuite_button. Executing manipulation of the argument button_exist_text can lead to basic cross site scripting.

The identification of this vulnerability is CVE-2025-11823. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More