Product
The ShopLentor WordPress plugin is vulnerable to authenticated remote code execution via insecure deserialization of user input in the REST API handler, allowing administrators to execute arbitrary PHP functions.