Vulnerabilities (CVE)

Filtered by vendor Weblizar Subscribe
Filtered by product School Management
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-33911 1 Weblizar 1 School Management 2025-07-16 N/A 7.6 HIGH
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.
CVE-2022-1609 1 Weblizar 1 School Management 2025-06-02 N/A 9.8 CRITICAL
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.