Weblizar
12 CVEs across 14 Weblizar products. Browse Weblizar vulnerabilities, severities, and proof-of-concept exploits.
Weblizar products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-2714 | Medium | 4.4 | 2026-04-22 | The Institute Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Enquiry Form Title' setting in all versions up to, and incl… |
CVE-2024-38756 | Medium | 5.3 | 2024-08-13 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functionality Not Properly Constrained by ACL… |
CVE-2024-33911 | High | 7.6 | 2024-05-02 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School… |
CVE-2024-1858 | Medium | 5.4 | 2024-03-29 | The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.9 via de… |
CVE-2022-1609 | Critical | 9.8 | 2024-01-16 | The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, a… |
CVE-2022-47430 | Medium | 6.7 | 2023-11-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar The School Management – Education & Learning Man… |
CVE-2022-46849 | High | 7.6 | 2023-11-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar Coming Soon Page – Responsive Coming Soon & Main… |
CVE-2017-20098 | Low | 3.5 | 2022-06-27 | A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads… |
CVE-2017-20056 | Low | 3.5 | 2022-06-16 | A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation lea… |
CVE-2021-34628 | High | 8.8 | 2021-08-02 | The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found in the ~/includes/Login-form-setting/Lo… |
CVE-2019-15781 | High | 8.8 | 2019-08-29 | The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF. |
CVE-2018-5656 | High | 8.8 | 2018-01-13 | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php. |
CVE-2018-5655 | Medium | 6.1 | 2018-01-13 | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter. |
CVE-2018-5654 | Medium | 6.1 | 2018-01-13 | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREE_Access_Token parameter. |
CVE-2018-5653 | Medium | 6.1 | 2018-01-13 | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizar_pffree_settings_save_ge… |