devitemsllc has 3 CVEs on record. 3 were published in the last 90 days. The median CVSS is 6.1 (medium). The most common weakness class is CWE-79 (3). Most affected products: HT Mega Addons for Elementor – Elementor Widgets & Template Builder (2), ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Weakness classes
Products
- HT Mega Addons for Elementor – Elementor Widgets & Template Builder 2
- ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin 1
Worst active — by depth score
CVE-2026-11895Medium· 6.4The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'display_options' Setting in all versions up to, and including, 3.1.1 due to insuffi…35CVE-2026-92554Medium· 6.1The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in all versions up to, and including, 3.5.1 due to insufficien…34CVE-2026-111318Medium· 5.4HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink30
devitemsllc vulnerabilities
CVEs affecting devitemsllc, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-111318Medium· 5.4HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink
The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href attribute of <a> inside .htmega-tab-nav' parameter in all versions up to, a…
CVE-2026-11895Medium· 6.4The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'display_options' Setting in all versions up to, and including, 3.1.1 due to insuffi…
The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'display_options' Setting in all versions up to, and including, 3.1.1 due to insuffi…
CVE-2026-92554Medium· 6.1The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in all versions up to, and including, 3.5.1 due to insufficien…
The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in all versions up to, and including, 3.5.1 due to insufficien…