Skip to content
PluginCanary

ShopLentor

ShopLentor - All-in-One WooCommerce Growth & Store Enhancement Plugin
by DevItems · 80,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: maintained, last release 4 Nov 2026, 49 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for ShopLentor
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Quick answers

Is ShopLentor still maintained?
Yes. Last release 4 Nov 2026, 49 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns ShopLentor, and has it changed hands?
No change recorded. Main committer devitemsllc since Aug 2018. 5 Nov 2026 · SVN log
Was ShopLentor removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is ShopLentor safe?
30 known vulnerabilities, all fixed (latest in 3.5.2). Not on the exploited list. 17 Sep 2026 · Wordfence Intelligence
Is the latest ShopLentor update safe to install?
No ownership change before 3.5.6. No one-star spike after it. 4 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
devitemsllc9 Aug 2018 to 4 Nov 2026, 305 commits

1 committer recorded. No ownership change since 2018.

Maintenance

Last release
today
Releases, 24 months
49
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for ShopLentor
Q1 20246
Q2 20249
Q3 20246
Q4 20244
Q1 20253
Q2 20253
Q3 20258
Q4 20258
Q1 20267
Q2 20267
Q3 20269
Q4 20262

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (5 reviews). Lifetime: 4.5.

Average rating per quarter for ShopLentor
Q2 20253.7
Q3 20253.8
Q4 20255.0
Q1 20265.0
Q2 20264.3
Q3 20265.0

Average rating rose from 3.7 to 5.0 between Q2 2025 and Q3 2026.

Rating distribution
5 star230
4 star9
3 star6
2 star4
1 star29
Latest low reviews

Security record

12 vulnerabilities in 24 months (30 on record), all patched (latest fixed in 3.5.2).

Show 30 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Sep 2026ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name6.1<= 3.5.13.5.2Patched before disclosure
4 Aug 2026ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API7.2<= 3.3.73.3.8Patched before disclosure
27 Jul 2026ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter4.3<= 3.4.53.4.6Patched before disclosure
27 Jul 2026ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9<= 3.4.53.4.6Patched before disclosure
26 May 2026ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute5.4<= 3.3.83.3.9Patched before disclosure
13 Apr 2026ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute6.4<= 3.3.53.3.6Patched before disclosure
17 Feb 2026ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action8.6<= 3.3.23.3.3Patched before disclosure
3 Nov 2025ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'9.8<= 3.2.53.2.6Patched before disclosure
24 Oct 2025ShopLentor - WooCommerce Builder for Elementor & Gutenberg +21 Modules - All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 3.2.43.2.5Patched before disclosure
9 Sep 2025ShopLentor <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.2.03.2.1Patched before disclosure
24 Apr 2025ShopLentor - WooCommerce Builder for Elementor & Gutenberg +20 Modules - All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter6.5<= 3.1.23.1.3Patched before disclosure
11 Mar 2025ShopLentor - WooCommerce Builder for Elementor & Gutenberg +20 Modules - All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module6.4<= 3.1.03.1.1Patched before disclosure
10 Oct 2024ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template4.3<= 2.9.82.9.9Patched before disclosure
24 Sep 2024ShopLentor - WooCommerce Builder for Elementor & Gutenberg +12 Modules - All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4<= 2.9.72.9.8Patched before disclosure
10 Jun 2024ShopLentor - WooCommerce Builder for Elementor & Gutenberg +12 Modules - All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget6.4<= 2.9.02.9.1Patched before disclosure
20 May 2024ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification7.1<= 2.8.82.8.9Patched before disclosure
20 May 2024ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode6.4<= 2.8.82.8.9Patched before disclosure
17 May 2024ShopLentor <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.72.8.8Patched before disclosure
3 May 2024ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products5.3<= 2.8.72.8.8Patched before disclosure
2 May 2024ShopLentor - WooCommerce Builder for Elementor & Gutenberg +12 Modules - All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id6.4<= 2.8.72.8.8Patched before disclosure
19 Apr 2024ShopLentor - WooCommerce Builder for Elementor & Gutenberg +10 Modules - All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.12.8.2Patched before disclosure
18 Apr 2024ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store4.3<= 2.8.12.8.2Patched before disclosure
4 Apr 2024ShopLentor - WooCommerce Builder for Elementor & Gutenberg +12 Modules - All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget6.4<= 2.8.42.8.5Patched before disclosure
3 Apr 2024ShopLentor - WooCommerce Builder for Elementor & Gutenberg +12 Modules - All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout6.4<= 2.8.32.8.4Patched before disclosure
14 Mar 2024ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link6.4<= 2.8.12.8.2Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 2 support threads resolved in the last 2 months.

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ShopLentor
4 May 20262,754
11 May 20266,203
18 May 202625,163
25 May 202614,622
1 Jun 20266,971
8 Jun 202628,662
15 Jun 202628,332
22 Jun 202627,674
29 Jun 20265,642
6 Jul 20267,898
13 Jul 202631,122
20 Jul 202615,469
27 Jul 202620,559
3 Aug 202610,286
10 Aug 20263,874
17 Aug 202635,975
24 Aug 202620,392
31 Aug 202627,096
7 Sep 202638,461
14 Sep 202630,427
21 Sep 202631,285
28 Sep 202624,742
5 Oct 20268,756
12 Oct 20263,889
19 Oct 202624,491
26 Oct 20268,163
2 Nov 2026645

Weekly downloads over the last 4 weeks are 49% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SKT TemplatesScore 100 · 20,000+Mega Addons For WPBakery Page BuilderScore 100 · 20,000+Visibility Logic for ElementorScore 100 · 20,000+Custom Icons for Elementor and WPBakeryScore 100 · 10,000+Make Column Clickable for ElementorScore 98 · 100,000+

Facts

Version3.5.6
AuthorDevItems
Added9 Aug 2018
Last updated4 Nov 2026
Active installs80,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagselementor, woocommerce, gutenberg blocks, WooCommerce Builder, woocommerce elementor

Other plugins by this author: HT Mega Addons for Elementor - Elementor Widgets & Template Builder, HashBar - Announcement, Notification Bar & Popup Campaign, Support Genix - Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System, Recurio - Ultimate Subscription for WooCommerce, CookieRay - Cookie Banner for Cookie Consent (GDPR/CCPA Compliant), WP Film Studio - WordPress Movie Maker/Production Plugin, HT Politic - For Political WordPress Themes / Website, WP Education - Education WordPress Plugin for Elementor, WP Insurance - WordPress Insurance Service Plugin, HT Blocks - Absolute Gutenberg Blocks, HT Service - Roofing Service WordPress Plugin, CourseGlade LMS - Online Course & eLearning Platform

Questions

Is ShopLentor still maintained?

Yes. Last release 4 Nov 2026, 49 releases in the last 24 months.

Who owns ShopLentor, and has it changed hands?

No change recorded. Main committer devitemsllc since Aug 2018.

Was ShopLentor removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is ShopLentor safe?

30 known vulnerabilities, all fixed (latest in 3.5.2). Not on the exploited list.

Is the latest ShopLentor update safe to install?

No ownership change before 3.5.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue