Bylancer
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Bookme – Free Online Appointment Booking and Scheduling Plugin | 1 | – | Nov 25, 2025 |
| QuickAI OpenAI | 1 | – | Jul 16, 2023 |
| QuickJob | 1 | – | Jul 16, 2023 |
| Quicklancer | 1 | – | Jul 29, 2024 |
| QuickOrder | 1 | – | Jul 16, 2023 |
| QuickQR | 1 | – | Jul 16, 2023 |
| QuickVCard | 1 | – | Jul 16, 2023 |
Exploited and recent CVEs
- CVE-2025-13385 Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter 0.3%
- CVE-2024-7188 Bylancer Quicklancer GET Parameter listing sql injection 7.0%
- CVE-2023-3690 Bylancer QuickOrder GET Parameter blog sql injection 0.5%
- CVE-2023-3689 Bylancer QuickQR GET Parameter blog sql injection 0.5%
- CVE-2023-3688 Bylancer QuickJob GET Parameter sql injection 0.5%
- CVE-2023-3687 Bylancer QuickVCard GET Parameter blog sql injection 0.5%
- CVE-2023-3686 Bylancer QuickAI OpenAI GET Parameter blog sql injection 0.5%