ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 50% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ yuximkt

   2mo ago

   Easy yo use, multiple functions.

   Read on wp.org ↗
2. ★★★★★ cilonme1

   2mo ago

   I had a problem between Woolentor single product template and Ocean WP/Woocommerce. My woolentor page looked the way I liked but once I was on the beta version of my website it was completely different and kind of messed up. I’ve contacted Woolentor Support service on a Friday afternoon. On Sunday I had a first answer and on Monday everything was right. That’s probable one of the best support service I’ve ever seen.

   Read on wp.org ↗
3. ★★★★★ kvnjonathan70

   2mo ago

   Good Plugin for basic modern store. Thnak you

   Read on wp.org ↗
4. ★★★★★ studiocardo

   3mo ago

   Absolutely one of the worst plugins I have ever purchased. I purchased it for multi-page checkout, but none of their multi-checkout module works. None of them. And the support wouldn’t and couldn’t do anything about it. Also, their plugin is like parasitic code. You can delete the widget, disable the plugin, and somehow their CSS element still managed to stay around and cause havoc. Some of the widgets aren’t bad, but there is absolutely no reason to pay for those widgets. If you are looking for multi-step checkout, don’t bother. There are much better solutions available out there, for practically free. Save your money, your sanity, your everything. Stay away from everything this company makes.

   Read on wp.org ↗
5. ★★★★★ bhetemi

   4mo ago

   The support team is very professional, and they found a solution to my problem. The Pro Version looks really good, and I will buy it!

   Read on wp.org ↗
6. ★★★★★ Fayez

   4mo ago

   Yes Helpfull

   Read on wp.org ↗
7. ★★★★★ Dương Thành Thái

   4mo ago

   I upgraded to the Pro version primarily because of the incredibly fast support and the developer’s high level of expertise. I started with the free version and everything worked well. When I encountered a conflict with another plugin, the developer was very quick to assist. While the free version provided a great experience, I wanted to unlock the additional features, which led me to purchase the Pro version. The whole process was seamless, and I am extremely satisfied with both the product and the developer

   Read on wp.org ↗
8. ★★★★★ petersterke

   5mo ago

   I do not like everything in Shoplentor and i was surprised there were restriction of words to use in categories and tags, but there support immediately reacted, did a check, acknowledged it was wrong and fixed it. So for support 5 stars,

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.4.5 Added: Hero Banner Widget in Elementor (6 Variations). Solved: Popup Builder settings saving issue. Solved: Variation Swatches specific product configure saving issues. Solved: Add to cart elementor widget throw error in 3.4.5
2. — Version 3.4.4 Solved: Minor issues. Compatibility: Latest WordPress and WooCommerce version. 3.4.4
3. — Version 3.4.3 Added: Free Shipping Bar Widget in Elementor. Added: Free Shipping Bar Block in Gutenberg. Solved: Module Drawer Settings icon issue in Module Settings Page. Solved: Widget Icon CSS Issue. Compatibility: Latest WordPress 3.4.3
4. — Version 3.4.2 Solved: Shopify Like checkout email field showing issue with WooPay. Compatibility: Latest WordPress and WooCommerce version. 3.4.2
5. — Version 3.4.1 Added: Shortcode for free shipping bar module. Usage: [woolentor_free_shipping_bar] Solved: Analytics data fetching API error in Free Shipping Bar module. Solved: Free Shipping Bar Module CSS Issue with grid view. Solved 3.4.1
6. — Version 3.4.0 Added: Free Shipping Bar Module Fixed: Minor Issues 3.4.0

29 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API ↗
   2026-08-04 CVE-2026-6020 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Affects <= 3.3.7 Patched in 3.3.8
2. Medium · 4.3 ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter ↗
   2026-07-27 CVE-2026-16797 Authorization Bypass Through User-Controlled Key Affects <= 3.4.5 Patched in 3.4.6
3. Medium · 4.9 ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter ↗
   2026-07-27 CVE-2026-16811 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.4.5 Patched in 3.4.6
4. Medium · 5.4 ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute ↗
   2026-05-26 CVE-2026-6287 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.8 Patched in 3.3.9
5. Medium · 6.4 ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute ↗
   2026-04-13 CVE-2026-4059 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.5 Patched in 3.3.6
6. High · 8.6 ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action ↗
   2026-02-17 CVE-2026-1714 Improper Neutralization of CRLF Sequences ('CRLF Injection') Affects <= 3.3.2 Patched in 3.3.3
7. Critical · 9.8 ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template' ↗
   2025-11-03 CVE-2025-12493 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.2.5 Patched in 3.2.6
8. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2025-10-24 CVE-2025-11823 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Affects <= 3.2.4 Patched in 3.2.5
9. Medium · 6.4 ShopLentor <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-09 CVE-2025-58990 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.0 Patched in 3.2.1
10. Medium · 6.5 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter ↗
    2025-04-24 CVE-2025-3775 Server-Side Request Forgery (SSRF) Affects <= 3.1.2 Patched in 3.1.3
11. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module ↗
    2025-03-11 CVE-2025-1527 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.0 Patched in 3.1.1
12. Medium · 4.3 ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template ↗
    2024-10-10 CVE-2024-9538 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.9.8 Patched in 2.9.9
13. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting ↗
    2024-09-24 CVE-2024-8668 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.9.7 Patched in 2.9.8
14. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget ↗
    2024-06-10 CVE-2024-5530 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.9.0 Patched in 2.9.1
15. High · 7.1 ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification ↗
    2024-05-20 CVE-2024-4566 Missing Authorization Affects <= 2.8.8 Patched in 2.8.9
16. Medium · 6.4 ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode ↗
    2024-05-20 CVE-2024-3345 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.8 Patched in 2.8.9
17. Medium · 6.4 ShopLentor <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-17 CVE-2024-34767 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.7 Patched in 2.8.8
18. Medium · 5.3 ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products ↗
    2024-05-03 CVE-2023-6327 Missing Authorization Affects <= 2.8.7 Patched in 2.8.8
19. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id ↗
    2024-05-02 CVE-2024-3991 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.7 Patched in 2.8.8
20. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-04-19 CVE-2024-1057 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.1 Patched in 2.8.2
21. Medium · 4.3 ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store ↗
    2024-04-18 CVE-2023-7067 Missing Authorization Affects <= 2.8.1 Patched in 2.8.2
22. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget ↗
    2024-04-04 CVE-2024-2946 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.4 Patched in 2.8.5
23. Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout ↗
    2024-04-03 CVE-2024-2868 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.3 Patched in 2.8.4
24. Medium · 6.4 ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link ↗
    2024-03-14 CVE-2024-1960 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.1 Patched in 2.8.2
25. Medium · 4.3 WooLentor <= 2.6.2 - Cross-Site Request Forgery via process_data ↗
    2023-07-05 CVE-2022-47172 Cross-Site Request Forgery (CSRF) Affects <= 2.6.2 Patched in 2.6.3
26. Medium · 5.4 ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates ↗
    2023-02-06 CVE-2022-46798 Cross-Site Request Forgery (CSRF) Affects <= 2.5.1 Patched in 2.5.2
27. Critical · 9.8 WooLentor <= 2.5.3 - PHP Object Injection ↗
    2023-01-28 CVE-2023-0232 Deserialization of Untrusted Data Affects <= 2.5.3 Patched in 2.5.4
28. Medium · 6.4 WooLentor <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-01-28 CVE-2023-0231 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.3 Patched in 2.5.4
29. Medium · 6.4 WooLentor – WooCommerce Elementor Addons + Builder <= 1.8.5 - Authenticated Stored Cross-Site Scripting ↗
    2021-04-13 CVE-2021-24262 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.8.6 Patched in 1.8.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 15 languages, 2 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-06 90K+ → 80K+ down after 188 days in tier
2. 2026-01-30 100K+ → 90K+ down after 1082 days in tier
3. 2023-02-13 90K+ → 100K+ up after 1 days in tier
4. 2023-02-12 100K+ → 90K+ down after 3 days in tier
5. 2023-02-09 90K+ → 100K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Exclusive Addons for Elementor 50K+ installs · 4.5★ · 2 shared tags A
• Dynamic Visibility for Elementor 50K+ installs · 4.5★ · 2 shared tags A
• Xpro Addons — 140+ Widgets for Elementor 40K+ installs · 4.3★ · 2 shared tags A
• Envo Extra 20K+ installs · 3.6★ · 2 shared tags B
• Futurio Extra 20K+ installs · 4.0★ · 2 shared tags B
• Elementor Website Builder – more than just a page builder 10M+ installs · 4.5★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin into a readme, a review or a deck. It updates itself.

ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin: 80K+ active installs, 4.5★ (275 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/woolentor-addons