CVE-2026-16797

Name of the Vulnerable Software and Affected Versions ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin versions prior to 3.4.6

Description An Insecure Direct Object Reference exists due to missing validation on a user-controlled key. Authenticated attackers with contributor-level access and above can exploit the optionSection parameter to read arbitrary wp options rows. This allows for cross-plugin data leakage, including internal plugin news feed data, WooCommerce block pattern transients, and third-party configuration records, specifically where values are stored as arrays-of-arrays containing title keys.

Recommendations Update ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin to version 3.4.6 or later. As a temporary workaround, restrict access to the optionSection parameter for users with contributor-level permissions.