Weblizar - WordPress Themes & Plugin vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Weblizar - WordPress Themes & Plugin products: 2 record(s), with severity, exploitation and fixes.

Newsletter Subscription Form – User Subscriptions Form, Capture Email 1 HR Management Lite 1

Exploited only (KEV) →

CVE-2026-41555 Critical · 9.3 CWE-89 Oct 6, 2026

WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.

CVE-2025-69022 Medium · 5.4 CWE-862 Dec 30, 2025

WordPress HR Management Lite plugin <= 3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HR Management Lite: from n/a through <= 3.6.