Weblizar School Management vulnerabilities

2 vulnerabilities

Known vulnerabilities in Weblizar School Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-1609unknownschool-management-pro+2
EPSS score
64.08%
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.9.1CVE-2024-33911weblizarschool_management+2
EPSS score
1.09%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.