ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

412 searches this plugin appeared in over the last 90 days, 12 listed. 400 left out as unrelated or noise (years, numbers, stray words). 5 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 3 months ago and a band this size takes about a year or more to cross, so the real count is still just under 90K.

1. ★★★★★ yuximkt

   4mo ago

   Easy yo use, multiple functions.

   Read on wp.org ↗
2. ★★★★★ cilonme1

   4mo ago

   I had a problem between Woolentor single product template and Ocean WP/Woocommerce. My woolentor page looked the way I liked but once I was on the beta version of my website it was completely different and kind of messed up. I’ve contacted Woolentor Support service on a Friday afternoon. On Sunday I had a first answer and on Monday everything was right. That’s probable one of the best support service I’ve ever seen.

   Read on wp.org ↗
3. ★★★★★ kvnjonathan70

   4mo ago

   Good Plugin for basic modern store. Thnak you

   Read on wp.org ↗
4. ★★★★★ studiocardo

   5mo ago

   Absolutely one of the worst plugins I have ever purchased. I purchased it for multi-page checkout, but none of their multi-checkout module works. None of them. And the support wouldn’t and couldn’t do anything about it. Also, their plugin is like parasitic code. You can delete the widget, disable the plugin, and somehow their CSS element still managed to stay around and cause havoc. Some of the widgets aren’t bad, but there is absolutely no reason to pay for those widgets. If you are looking for multi-step checkout, don’t bother. There are much better solutions available out there, for practically free. Save your money, your sanity, your everything. Stay away from everything this company makes.

   Read on wp.org ↗
5. ★★★★★ bhetemi

   6mo ago

   The support team is very professional, and they found a solution to my problem. The Pro Version looks really good, and I will buy it!

   Read on wp.org ↗
6. ★★★★★ Fayez

   6mo ago

   Yes Helpfull

   Read on wp.org ↗
7. ★★★★★ Dương Thành Thái

   6mo ago

   I upgraded to the Pro version primarily because of the incredibly fast support and the developer’s high level of expertise. I started with the free version and everything worked well. When I encountered a conflict with another plugin, the developer was very quick to assist. While the free version provided a great experience, I wanted to unlock the additional features, which led me to purchase the Pro version. The whole process was seamless, and I am extremely satisfied with both the product and the developer

   Read on wp.org ↗
8. ★★★★★ petersterke

   7mo ago

   I do not like everything in Shoplentor and i was surprised there were restriction of words to use in categories and tags, but there support immediately reacted, did a check, acknowledged it was wrong and fixed it. So for support 5 stars,

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.4.5 Added: Hero Banner Widget in Elementor (6 Variations). Solved: Popup Builder settings saving issue. Solved: Variation Swatches specific product configure saving issues. Solved: Add to cart elementor widget throw error in 3.4.5
2. — Version 3.4.4 Solved: Minor issues. Compatibility: Latest WordPress and WooCommerce version. 3.4.4
3. — Version 3.4.3 Added: Free Shipping Bar Widget in Elementor. Added: Free Shipping Bar Block in Gutenberg. Solved: Module Drawer Settings icon issue in Module Settings Page. Solved: Widget Icon CSS Issue. Compatibility: Latest WordPress 3.4.3
4. — Version 3.4.2 Solved: Shopify Like checkout email field showing issue with WooPay. Compatibility: Latest WordPress and WooCommerce version. 3.4.2
5. — Version 3.4.1 Added: Shortcode for free shipping bar module. Usage: [woolentor_free_shipping_bar] Solved: Analytics data fetching API error in Free Shipping Bar module. Solved: Free Shipping Bar Module CSS Issue with grid view. Solved 3.4.1
6. — Version 3.4.0 Added: Free Shipping Bar Module Fixed: Minor Issues 3.4.0

All 30 disclosed vulnerabilities are patched in the current version (3.5.5). Sites still on an older version should update.

1. Patched Medium · 6.1 ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name ↗
   2026-09-17 CVE-2026-92554 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.1 Patched in 3.5.2
2. Patched High · 7.2 ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API ↗
   2026-08-04 CVE-2026-6020 Use of Externally-Controlled Input to Select Classes or Code Affects <= 3.3.7 Patched in 3.3.8
3. Patched Medium · 4.3 ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'optionSection' Parameter ↗
   2026-07-27 CVE-2026-16797 Authorization Bypass Through User-Controlled Key Affects <= 3.4.5 Patched in 3.4.6
4. Patched Medium · 4.9 ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter ↗
   2026-07-27 CVE-2026-16811 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.4.5 Patched in 3.4.6
5. Patched Medium · 5.4 ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute ↗
   2026-05-26 CVE-2026-6287 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.8 Patched in 3.3.9
6. Patched Medium · 6.4 ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute ↗
   2026-04-13 CVE-2026-4059 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.5 Patched in 3.3.6
7. Patched High · 8.6 ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action ↗
   2026-02-17 CVE-2026-1714 Improper Neutralization of CRLF Sequences Affects <= 3.3.2 Patched in 3.3.3
8. Patched Critical · 9.8 ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template' ↗
   2025-11-03 CVE-2025-12493 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.2.5 Patched in 3.2.6
9. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2025-10-24 CVE-2025-11823 Improper Neutralization of Script-Related HTML Tags in a Web Page Affects <= 3.2.4 Patched in 3.2.5
10. Patched Medium · 6.4 ShopLentor <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-09-09 CVE-2025-58990 Improper Neutralization of Input During Web Page Generation Affects <= 3.2.0 Patched in 3.2.1
11. Patched Medium · 6.5 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter ↗
    2025-04-24 CVE-2025-3775 Server-Side Request Forgery Affects <= 3.1.2 Patched in 3.1.3
12. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module ↗
    2025-03-11 CVE-2025-1527 Improper Neutralization of Input During Web Page Generation Affects <= 3.1.0 Patched in 3.1.1
13. Patched Medium · 4.3 ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template ↗
    2024-10-10 CVE-2024-9538 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.9.8 Patched in 2.9.9
14. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting ↗
    2024-09-24 CVE-2024-8668 Improper Neutralization of Input During Web Page Generation Affects <= 2.9.7 Patched in 2.9.8
15. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget ↗
    2024-06-10 CVE-2024-5530 Improper Neutralization of Input During Web Page Generation Affects <= 2.9.0 Patched in 2.9.1
16. Patched High · 7.1 ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification ↗
    2024-05-20 CVE-2024-4566 Missing Authorization Affects <= 2.8.8 Patched in 2.8.9
17. Patched Medium · 6.4 ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode ↗
    2024-05-20 CVE-2024-3345 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.8 Patched in 2.8.9
18. Patched Medium · 6.4 ShopLentor <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-17 CVE-2024-34767 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.7 Patched in 2.8.8
19. Patched Medium · 5.3 ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products ↗
    2024-05-03 CVE-2023-6327 Missing Authorization Affects <= 2.8.7 Patched in 2.8.8
20. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id ↗
    2024-05-02 CVE-2024-3991 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.7 Patched in 2.8.8
21. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-04-19 CVE-2024-1057 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.1 Patched in 2.8.2
22. Patched Medium · 4.3 ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store ↗
    2024-04-18 CVE-2023-7067 Missing Authorization Affects <= 2.8.1 Patched in 2.8.2
23. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget ↗
    2024-04-04 CVE-2024-2946 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.4 Patched in 2.8.5
24. Patched Medium · 6.4 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout ↗
    2024-04-03 CVE-2024-2868 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.3 Patched in 2.8.4
25. Patched Medium · 6.4 ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link ↗
    2024-03-14 CVE-2024-1960 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.1 Patched in 2.8.2
26. Patched Medium · 4.3 WooLentor <= 2.6.2 - Cross-Site Request Forgery via process_data ↗
    2023-07-05 CVE-2022-47172 Cross-Site Request Forgery Affects <= 2.6.2 Patched in 2.6.3
27. Patched Medium · 5.4 ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates ↗
    2023-02-06 CVE-2022-46798 Cross-Site Request Forgery Affects <= 2.5.1 Patched in 2.5.2
28. Patched Critical · 9.8 WooLentor <= 2.5.3 - PHP Object Injection ↗
    2023-01-28 CVE-2023-0232 Deserialization of Untrusted Data Affects <= 2.5.3 Patched in 2.5.4
29. Patched Medium · 6.4 WooLentor <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-01-28 CVE-2023-0231 Improper Neutralization of Input During Web Page Generation Affects <= 2.5.3 Patched in 2.5.4
30. Patched Medium · 6.4 WooLentor – WooCommerce Elementor Addons + Builder <= 1.8.5 - Authenticated Stored Cross-Site Scripting ↗
    2021-04-13 CVE-2021-24262 Improper Neutralization of Input During Web Page Generation Affects < 1.8.6 Patched in 1.8.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 16 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-06 90K+ → 80K+ down after 188 days in tier
2. 2026-01-30 100K+ → 90K+ down after 1082 days in tier
3. 2023-02-13 90K+ → 100K+ up after 1 days in tier
4. 2023-02-12 100K+ → 90K+ down after 3 days in tier
5. 2023-02-09 90K+ → 100K+ up after 249 days in tier
6. 2022-06-05 80K+ → 90K+ up after 77 days in tier
7. 2022-03-20 70K+ → 80K+ up after 151 days in tier
8. 2021-10-20 60K+ → 70K+ up after 124 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin into a readme, a review or a deck. It updates itself.

ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin: 80K+ active installs, 4.5★ (278 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/woolentor-addons