Bylancer
12 CVEs across 10 Bylancer products. Browse Bylancer vulnerabilities, severities, and proof-of-concept exploits.
Bylancer products with known CVEs
Bylancer CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2018-25382 | High | 8.2 | 2026-05-29 | Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the unam… |
CVE-2018-25339 | High | 8.2 | 2026-05-17 | Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based bli… |
CVE-2018-25338 | High | 8.2 | 2026-05-17 | Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-ba… |
CVE-2018-25334 | Medium | 5.4 | 2026-05-17 | Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections… |
CVE-2025-13385 | Medium | 4.9 | 2025-11-25 | The Bookme – Free Online Appointment Booking and Scheduling Plugin for WordPress is vulnerable to time-based SQL Injection via the `filter[status]` parameter i… |
CVE-2024-7188 | High | 7.3 | 2024-07-29 | A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the co… |
CVE-2023-3690 | Medium | 6.3 | 2023-07-16 | A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functionality of the fil… |
CVE-2023-3689 | Medium | 6.3 | 2023-07-16 | A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7. Affected by this vulnerability is an unknown functionality of the file /blog of the… |
CVE-2023-3688 | Medium | 6.3 | 2023-07-16 | A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the component GET Parameter Handler. The man… |
CVE-2023-3687 | Medium | 6.3 | 2023-07-16 | A vulnerability was found in Bylancer QuickVCard 2.1. It has been rated as critical. This issue affects some unknown processing of the file /blog of the compon… |
CVE-2023-3686 | Medium | 6.3 | 2023-07-16 | A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects unknown code of the file /blog of the… |
CVE-2018-8737 | Medium | 5.4 | 2018-03-17 | Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note (aka custName and custNote)… |