Weblizar records
12 published records for vendor weblizar.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
58Plan | CVE-2022-1609Proof of concept | The School Management < 9.9.7 - Unauthenticated RCE via REST apiweblizar · school management · CWE-94 | Critical9.8 | — | 64.0% | Jan 16, 2024 |
39Monitor | CVE-2022-47430No exploit | WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injectionweblizar · school management - education \& learning management · CWE-89 | Critical9.8 | — | 0.6% | Nov 6, 2023 |
39Monitor | CVE-2022-46849No exploit | WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injectionweblizar · responsive coming soon \& maintenance mode · CWE-89 | Critical9.8 | — | 0.6% | Nov 6, 2023 |
35Monitor | CVE-2019-15781No exploit | The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.weblizar · social likebox \& feed · CWE-352 | High8.8 | — | 0.7% | Aug 29, 2019 |
35Monitor | CVE-2021-34628No exploit | Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scriptingweblizar · admin custom login · CWE-352 | High8.8 | — | 0.7% | Aug 2, 2021 |
35Monitor | CVE-2018-5656No exploit | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-352 | High8.8 | — | 0.6% | Jan 12, 2018 |
28Monitor | CVE-2024-33911Proof of concept | WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerabilityweblizar · school management · CWE-89 | High7.2 | — | 1.0% | May 2, 2024 |
24Monitor | CVE-2018-5654No exploit | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-79 | Medium6.1 | — | 0.9% | Jan 12, 2018 |
24Monitor | CVE-2018-5653No exploit | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-79 | Medium6.1 | — | 0.9% | Jan 12, 2018 |
24Monitor | CVE-2018-5655No exploit | An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.weblizar · pinterest-feeds · CWE-79 | Medium6.1 | — | 0.7% | Jan 12, 2018 |
21Monitor | CVE-2024-38756No exploit | WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerabilityweblizar · coming soon · CWE-200 | Medium5.3 | — | 0.3% | Aug 13, 2024 |
19Monitor | CVE-2017-20098No exploit | Admin Custom Login Plugin Persistent cross site scriptingweblizar · admin custom login · CWE-80 | Medium4.8 | — | 0.5% | Jun 27, 2022 |
- CVE-2022-160958Plan
The School Management < 9.9.7 - Unauthenticated RCE via REST api
CriticalCVSS 9.8Proof of conceptEPSS 64%weblizar · school managementJan 16, 2024
- CVE-2022-4743039Monitor
WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection
CriticalCVSS 9.8No exploitEPSS 0%weblizar · school management - education \& learning managementNov 6, 2023
- CVE-2022-4684939Monitor
WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection
CriticalCVSS 9.8No exploitEPSS 0%weblizar · responsive coming soon \& maintenance modeNov 6, 2023
- CVE-2019-1578135Monitor
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
HighCVSS 8.8No exploitEPSS 0%weblizar · social likebox \& feedAug 29, 2019
- CVE-2021-3462835Monitor
Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
HighCVSS 8.8No exploitEPSS 0%weblizar · admin custom loginAug 2, 2021
- CVE-2018-565635Monitor
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
HighCVSS 8.8No exploitEPSS 0%weblizar · pinterest-feedsJan 12, 2018
- CVE-2024-3391128Monitor
WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability
HighCVSS 7.2Proof of conceptEPSS 1%weblizar · school managementMay 2, 2024
- CVE-2018-565424Monitor
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
MediumCVSS 6.1No exploitEPSS 0%weblizar · pinterest-feedsJan 12, 2018
- CVE-2018-565324Monitor
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
MediumCVSS 6.1No exploitEPSS 0%weblizar · pinterest-feedsJan 12, 2018
- CVE-2018-565524Monitor
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress.
MediumCVSS 6.1No exploitEPSS 0%weblizar · pinterest-feedsJan 12, 2018
- CVE-2024-3875621Monitor
WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerability
MediumCVSS 5.3No exploitEPSS 0%weblizar · coming soonAug 13, 2024
- CVE-2017-2009819Monitor
Admin Custom Login Plugin Persistent cross site scripting
MediumCVSS 4.8No exploitEPSS 0%weblizar · admin custom loginJun 27, 2022