What is the CVSS score of CVE-2026-61973?

CVE-2026-61973 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

ShopLentor Pro CVE-2026-61973

EUVD-2026-48212 MEDIUM

Missing Authorization (CWE-862)

2026-07-23 Patchstack

GHSA-948q-58mh-q2g5

WordPress Authentication Bypass Wordpress Plugin Shoplentor Pro

4.3

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

4.3 MEDIUM

PR:L confirmed by subscriber-role requirement; AV:N as plugin AJAX/REST endpoints are network-accessible; I:L for unauthorized write actions; C and A remain N as no data disclosure or disruption is described.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 13:30 vuln.today

DescriptionCVE.org

Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.

AnalysisAI

Broken access control in ShopLentor Pro (WordPress WooCommerce page builder plugin) versions up to and including 2.8.5 allows authenticated subscriber-level users to perform privileged actions beyond their intended authorization scope, resulting in unauthorized data or configuration modification. The flaw is network-accessible with low attack complexity and requires only a low-privilege WordPress account. No public exploit code has been identified at time of analysis and this vulnerability does not appear in the CISA KEV catalog.

Technical ContextAI

ShopLentor Pro (CPE: cpe:2.3:a:woolentor:shoplentor_pro) is a premium WooCommerce-focused page builder plugin for WordPress developed by WooLentor/HasThemes. CWE-862 (Missing Authorization) indicates that one or more plugin-registered REST API endpoints, AJAX action handlers, or admin-side callbacks fail to perform adequate capability checks before executing privileged operations. WordPress's subscriber role is the lowest authenticated role, possessing virtually no administrative capabilities. When authorization gates are absent or improperly implemented on sensitive handlers, a subscriber can invoke functionality intended solely for editors, shop managers, or administrators - a common pattern in WordPress plugin vulnerabilities catalogued by Patchstack.

RemediationAI

Update ShopLentor Pro to a version beyond 2.8.5 via the WordPress plugin dashboard or by downloading the patched release from the vendor. The exact fixed version number is not independently confirmed from available data - consult the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/woolentor-addons-pro/vulnerability/wordpress-shoplentor-pro-plugin-2-8-5-broken-access-control-vulnerability-2 for the confirmed patched release. As an interim compensating control, disabling open user registration (Settings > General > uncheck 'Anyone can register') removes the self-registration vector, significantly raising the bar for unauthenticated attackers. Additionally, auditing existing subscriber-role accounts and revoking any suspicious ones reduces exposure. Note that disabling registration may affect legitimate site workflows such as customer account creation for WooCommerce stores - evaluate trade-offs before applying.