Read the docs

Bylancer

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Bylancer records in CISA KEV

No Bylancer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bookme 1 record LOW Quickai Openai 1 record MEDIUM Quickjob 1 record MEDIUM Quicklancer 1 record HIGH Quickorder 1 record MEDIUM Quickqr 1 record MEDIUM Quickvcard 1 record MEDIUM

Records

12 records

TI-2018-15607 CVE-2018-25382 · GHSA-g3jh-2c96-x65c

Zechat 1.5 SQL Injection via uname Parameter

Priority HIGH 77

Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-29 No fix listed CWE-89
TI-2018-15564 CVE-2018-25339 · GHSA-54vr-4j7c-rcvj

Zechat 1.5 SQL Injection via v parameter (time-based blind)

Priority HIGH 77

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00267 Published 2026-05-17 No fix listed CWE-89
TI-2018-15563 CVE-2018-25338 · GHSA-67j6-rmc9-jfxj

Zechat 1.5 SQL Injection via hashtag parameter

Priority HIGH 77

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00267 Published 2026-05-17 No fix listed CWE-89
TI-2018-15559 CVE-2018-25334 · GHSA-j92p-x5jx-887r

Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter

Priority MEDIUM 57

Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00145 Published 2026-05-17 No fix listed CWE-352
TI-2023-03447 CVE-2023-3690 · GHSA-fqg4-3q52-9x7c

Bylancer QuickOrder GET Parameter blog sql injection

Priority MEDIUM 43

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2023-07-16 No fix listed CWE-89
TI-2023-03446 CVE-2023-3689 · GHSA-v9fw-q48r-m4pp

Bylancer QuickQR GET Parameter blog sql injection

Priority MEDIUM 43

A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2023-07-16 No fix listed CWE-89
TI-2023-03445 CVE-2023-3688 · GHSA-vh4c-q5r5-gh3r

Bylancer QuickJob GET Parameter sql injection

Priority MEDIUM 43

A vulnerability classified as critical has been found in Bylancer QuickJob 6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2023-07-16 No fix listed CWE-89
TI-2025-12237 CVE-2025-13385 · GHSA-q6qq-mmmf-h3gm

Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter

Priority LOW 22

The Bookme – Free Online Appointment Booking and Scheduling Plugin for WordPress is vulnerable to time-based SQL Injection via the `filter[status]` parameter in all versions up to, and including, 4.2 due to insufficient…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00319 Published 2025-11-25 No fix listed CWE-89
Open these records in search →