Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and including, 3.3.2. This is due to the lack of validation on the 'send_to', 'product_title', 'wlmessage', and 'wlemail' parameters in the 'woolentor_suggest_price_action' AJAX endpoint. This makes it possible for unauthenticated attackers to send arbitrary emails to any recipient with full control over the subject line, message content, and sender address (via CRLF injection in the 'wlemail' parameter), effectively turning the website into a full email relay for spam or phishing campaigns.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1714 Email Relay Abuse Vulnerability in ShopLentor WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1714
Post summary
The text lists CVE-2026-1714 with a brief label of an email relay abuse vulnerability in the ShopLentor WordPress plugin and provides a link to a vulnerability details page, but offers no actionable or detailed information.
[CVE-2026-1714: HIGH] Vulnerability Alert: ShopLentor plugin for WordPress up to version 3.3.2 susceptible to Email Relay Abuse due to lack of validation, enabling unauthenticated attacks.#cve,CVE-2026-1714,#cybersecurity https://cvefind.com/CVE-2026-1714
Post summary
The tweet announces a high‑severity vulnerability (CVE‑2026‑1714) in the ShopLentor WordPress plugin that permits unauthenticated email relay abuse, without mentioning active exploitation, patches, or PoCs.
⚡ New CVE Alert: CVE-2026-1714 📊 Severity: 8.6 🚨 Risk Level: High 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1714 #CVE-2026-1714 #CVE #High #Wordpress #CyberSecurity #InfoSec https://t.co/QLEQXR4ViJ
Post summary
The tweet announces the new CVE-2026-1714 for WordPress, indicating a high severity score of 8.6, but provides no additional details such as PoC, exploit code, or patch.
CVE-2026-1714 The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions… https://www.cve.org/CVERecord?id=CVE-2026-1714
Post summary
A new CVE-2026-1714 vulnerability has been disclosed for the ShopLentor WooCommerce Builder plugin, exposing an email relay abuse flaw across all plugin versions.
🟠 CVE-2026-1714 - High The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and includin... https://www.thehackerwire.com/vulnerability/CVE-2026-1714/ https://t.co/cGSSj4Rb2s
Post summary
A high‑severity CVE-2026-1714 has been disclosed for the ShopLentor WooCommerce plugin, indicating an email relay abuse vulnerability; no PoC, exploit, or patch details are provided.