Weblizar vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 20232
4. 20243
5. 20263

Newest CVEs

• CVE-2026-9767

  The School Management <= 5.4 - Authenticated (Custom+) SQL Injection via 'order[0][dir]' Parameter

  weblizar · The School Management – Education & Learning ERP

  Medium6.5
• CVE-2026-2487

  Admin Custom Login <= 3.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Message Above Login Form' Setting

  weblizar · Admin Custom Login

  Medium4.4
• CVE-2026-2714

  Institute Management <= 5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Enquiry Form Title' Setting

  weblizar · Institute Management – Learning Management System

  Medium4.4
• CVE-2024-38756

  WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerability

  Weblizar · Coming Soon

  Medium5.3
• CVE-2024-33911

  WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability

  Weblizar · School Management Pro

  High7.6
• CVE-2024-1858

  Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection

  weblizar · Lightbox slider – Responsive Lightbox Gallery

  Medium5.4
• CVE-2022-46849

  WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection

  Weblizar · Coming Soon Page – Responsive Coming Soon & Maintenance Mode

  High7.6
• CVE-2022-47430

  WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection

  Weblizar · The School Management – Education & Learning Management

  Medium6.7
• CVE-2017-20056

  weblizar User Login Log Plugin Stored cross site scriting

  weblizar · User Login Log Plugin

  Low3.5
• CVE-2021-34628

  Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting

  Weblizar · Admin Custom Login

  High8.8