Weblizar – Wordpress Themes & Plugin vulnerabilities
5 vulnerabilities
Known vulnerabilities in Weblizar – Wordpress Themes & Plugin products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- HR Management Lite2 vulnerabilities
- About Author1 vulnerabilities
- Lightbox Slider – Responsive Lightbox Gallery1 vulnerabilities
- Newsletter Subscription Form – User Subscriptions Form, Capture Email1 vulnerabilities
CVE-2025-29005weblizar - wordpress themes & pluginhr management lite+1
EPSS score0.16%
Cross-Site Request Forgery (CSRF) vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Cross Site Request Forgery.This issue affects HR Management Lite: from n/a through <= 3.6.CVE-2025-69022weblizar - wordpress themes & pluginhr management lite+1EPSS score0.21%
Missing Authorization vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HR Management Lite: from n/a through <= 3.6.CVE-2025-30808weblizar - wordpress themes & pluginabout author+1EPSS score0.31%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weblizar - WordPress Themes & Plugin About Author about-author allows Reflected XSS.This issue affects About Author: from n/a through <= 1.6.2.CVE-2024-49280weblizar - wordpress themes & pluginlightbox slider – responsive lightbox gallery+1EPSS score0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weblizar - WordPress Themes & Plugin Lightbox slider – Responsive Lightbox Gallery simple-lightbox-gallery allows Stored XSS.This issue affects Lightbox slider – Responsive Lightbox Gallery: from n/a through <= 1.10.6.CVE-2026-41555weblizar – wordpress themes & pluginnewsletter subscription form – user subscriptions form, capture email+1EPSS score0.25%
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.