Weblizar
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Admin Custom Login | 2 | – | Aug 16, 2026 |
| Coming Soon | 1 | – | Aug 13, 2024 |
| Coming Soon Page – Responsive Coming Soon & Maintenance Mode | 1 | – | Nov 6, 2023 |
| Institute Management – Learning Management System | 1 | – | Apr 22, 2026 |
| Lightbox slider – Responsive Lightbox Gallery | 1 | – | Mar 29, 2024 |
| School Management Pro | 1 | – | May 2, 2024 |
| The School Management – Education & Learning ERP | 1 | – | Aug 16, 2026 |
| The School Management – Education & Learning Management | 1 | – | Nov 6, 2023 |
Exploited and recent CVEs
- CVE-2026-9767 The School Management <= 5.4 - Authenticated (Custom+) SQL Injection via 'order[0][dir]' Parameter 0.6%
- CVE-2026-2487 Admin Custom Login <= 3.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Message Above Login Form' Setting 0.3%
- CVE-2026-2714 Institute Management <= 5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Enquiry Form Title' Setting 0.3%
- CVE-2024-38756 WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2024-33911 WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability 1.1%
- CVE-2024-1858 Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection 0.5%
- CVE-2022-46849 WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection 0.7%
- CVE-2022-47430 WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection 0.7%
- CVE-2021-34628 Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.7%