CVE Tools
Track your stack

Devitemsllc

20 CVEs tracked since 2024. Since Apr 2024, none of them reached CISA KEV.

Devitemsllc CVEs per month

Apr 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Devitemsllc CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0450
2024-05150
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Devitemsllc's monthly top three, with their CVEs summed over those months.

  1. Ht Mega Addons For Elementor – Elementor Widgets & Template Builder112 months
  2. Shoplentor – All-in-one Woocommerce Growth & Store Enhancement Plugin92 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Devitemsllc.

  1. CVE-2026-11895HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting6.4
  2. CVE-2026-92554ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name6.1
  3. CVE-2026-19806Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token8.8
  4. CVE-2026-6020ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API7.2
  5. CVE-2026-16811ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9
  6. CVE-2026-16797ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter4.3
  7. CVE-2026-12936Recurio <= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter4.9
  8. CVE-2026-6287ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute5.4
  9. CVE-2026-4059ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute6.4
  10. CVE-2026-1714ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action8.6
  11. CVE-2025-13141HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection6.4
  12. CVE-2025-12493ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'9.8
  13. CVE-2025-11823ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4
  14. CVE-2025-8068HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions4.3
  15. CVE-2025-8401HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure4.3

The record

Peak rank
#83 in May 2024
Busiest month shown
May 2024, 15 CVEs
Months with a KEV entry
0 since Apr 2024
Monthly snapshots
2 since 2024
Devitemsllc's full record, month by month