Weblizar vulnerabilities

Products

• Pinterest-feeds 4
• Admin Custom Login 2
• Admin Custom Login 2
• Lightbox Slider – Responsive Lightbox Gallery 2
• Responsive Coming Soon \& Maintenance Mode 2
• School Management 2

Newest

• weblizar the school management – education & learning erp The School Management <= 5.4 - Authenticated (Custom+) SQL Injection via 'order[0][dir]' Parameter CVE-2026-9767 6.5 MediumAugust 16, 2026
• weblizar admin custom login Admin Custom Login <= 3.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Message Above Login Form' Setting CVE-2026-2487 4.4 MediumAugust 16, 2026
• weblizar institute management – learning management system Institute Management <= 5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Enquiry Form Title' Setting CVE-2026-2714 4.4 MediumApril 22, 2026
• weblizar about author WordPress About Author plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30808 7.1 HighApril 1, 2025
• weblizar lightbox slider – responsive lightbox gallery WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-49280 6.5 MediumOctober 17, 2024
• weblizar coming soon, responsive coming soon \& maintenance mode +1 more WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerability CVE-2024-38756 5.3 MediumAugust 13, 2024
• weblizar school management pro, school management +1 more WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability CVE-2024-33911 Public exploit 7.6 HighMay 2, 2024
• weblizar lightbox slider – responsive lightbox gallery Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection CVE-2024-1858 5.4 MediumMarch 29, 2024
• weblizar school management, unknown school-management-pro +1 more The School Management < 9.9.7 - Unauthenticated RCE via REST api CVE-2022-1609 Public exploit EPSS 64.1% 9.8 CriticalJanuary 16, 2024
• weblizar coming soon page – responsive coming soon & maintenance mode, responsive coming soon \& maintenance mode +1 more WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection CVE-2022-46849 7.6 HighNovember 6, 2023
• weblizar the school management – education & learning management, school management - education \& learning management +1 more WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection CVE-2022-47430 6.7 MediumNovember 6, 2023
• unspecified admin custom login plugin, weblizar admin custom login +1 more Admin Custom Login Plugin Persistent cross site scripting CVE-2017-20098 3.5 LowJune 27, 2022
• intechnosoftware user login log, weblizar user login log plugin +1 more weblizar User Login Log Plugin Stored cross site scriting CVE-2017-20056 3.5 LowJune 16, 2022
• weblizar admin custom login Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2021-34628 8.8 HighAugust 2, 2021
• weblizar social likebox \& feed The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF. CVE-2019-15781 8.8 HighAugust 29, 2019
• weblizar pinterest-feeds An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists... CVE-2018-5656 8.8 HighJanuary 13, 2018
• weblizar pinterest-feeds An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists... CVE-2018-5655 6.1 MediumJanuary 13, 2018
• weblizar pinterest-feeds An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists... CVE-2018-5654 6.1 MediumJanuary 13, 2018
• weblizar pinterest-feeds An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists... CVE-2018-5653 6.1 MediumJanuary 13, 2018