{"uuid": "4c58603a-cc2a-4d10-b657-43f9d7b14768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8489", "type": "seen", "source": "https://t.me/cyberwarehouse/990", "content": "CVE-2025-8489: Path Traversal in ShopLentor WordPress Plugin, 9.8 rating \ud83d\udd25\n\nA recent vulnerability in the ShopLentor (formerly WooLentor) plugin allows unauthenticated attackers to execute any code from PHP files on the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/wKuHH\n\ud83d\udc49 Dork: http.body:\"plugins/woolentor-addons\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woolentor-addons/shoplentor-325-unauthenticated-local-php-file-inclusion-via-load-template", "creation_timestamp": "2026-07-26T02:00:08.248085Z"}