Weblizar

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Weblizar records in CISA KEV

No Weblizar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pinterest-feeds 4 records LOW Admin Custom Login 2 records MEDIUM School Management 2 records HIGH Responsive Coming Soon & Maintenance Mode 1 record MEDIUM School Management - Education & Learning Management 1 record MEDIUM Social Likebox & Feed 1 record LOW

Records

2 records in School Management · all components

TI-2022-01479 CVE-2022-1609 · GHSA-4g99-5gw9-42hv

The School Management < 9.9.7 - Unauthenticated RCE via REST api

HIGH 84

The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.64075 Published 2024-01-16 Fixed in 9.9.7 CWE-94

TI-2024-22381 CVE-2024-33911 · GHSA-j847-crmf-8mpc

WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability

LOW 35

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.01094 Published 2024-05-02 No fix listed CWE-89

Open these records in search →

Critical	3
High	4
Medium	10
Low	0
No CVSS	0