Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Weblizar - WordPress Themes & Plugin Clear all filters
TI-2026-67994 CVE-2026-41555 · GHSA-jmm7-jg22-c3c6

SQL injection in Newsletter Subscription Form WordPress plugin

Priority MEDIUM 46

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00243 Published 2026-10-06 No fix listed CWE-89
TI-2025-42477 CVE-2025-69022 · GHSA-mrhx-85fj-369h

WordPress HR Management Lite plugin <= 3.6 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HR Management L…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00213 Published 2025-12-30 No fix listed CWE-862
TI-2025-20948 CVE-2025-29005 · GHSA-cmp3-q2f2-v785

WordPress HR Management Lite plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Cross Site Request Forgery.This issue affects HR Management Lite: from n/a through <= 3…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00165 Published 2025-06-06 No fix listed CWE-352
TI-2025-22078 CVE-2025-30808 · GHSA-mhc5-qc33-269c

WordPress About Author plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weblizar - WordPress Themes & Plugin About Author about-author allows Reflected XSS.This issue affects About Author: f…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00317 Published 2025-04-01 No fix listed CWE-79
TI-2024-32873 CVE-2024-49280 · GHSA-7f3m-28f6-g433

WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weblizar - WordPress Themes & Plugin Lightbox slider – Responsive Lightbox Gallery simple-lightbox-gallery allows Stor…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00268 Published 2024-10-17 No fix listed CWE-79