Stylemix vulnerabilities

Products

• Masterstudy Lms 22
• Cost Calculator Builder 18
• Motors – Car Dealership & Classified Listings Plugin 17
• Masterstudy Lms Wordpress Plugin – For Online Courses And Education 13
• Directory Listings Wordpress Plugin – Ulisting 12
• Ulisting 11
• Motors 5
• Motors – Car Dealer, Classifieds & Listing 3
• Pearl – Header Builder 3
• Masterstudy Lms Wordpress Plugin 2
• Pearl 2

Newest

• stylemix motors – car dealership & classified listings plugin Motors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User Meta CVE-2026-104746 8.1 HighNovember 7, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability CVE-2026-119478 4.3 MediumNovember 7, 2026
• stylemix motors – car dealership & classified listings plugin Motors <= 1.4.128 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Taxonomy Term Name via 'stm_f_s' Parameter CVE-2026-116562 6.4 MediumNovember 7, 2026
• stylemix motors – car dealership & classified listings plugin Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter CVE-2026-116617 8.1 HighNovember 5, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability CVE-2026-118090 8.8 HighOctober 30, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability CVE-2026-118092 4.3 MediumOctober 29, 2026
• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax CVE-2026-80069 5.3 MediumOctober 29, 2026
• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter CVE-2026-80067 5.3 MediumOctober 29, 2026
• stylemix ulisting WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability CVE-2026-62033 7.6 HighOctober 10, 2026
• stylemix ulisting WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability CVE-2026-62031 9.3 CriticalOctober 10, 2026
• stylemix motors – car dealership & classified listings plugin Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter CVE-2026-96563 6.4 MediumOctober 10, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability CVE-2026-105079 6.5 MediumOctober 8, 2026
• stylemix cost calculator builder WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability CVE-2026-97307 7.5 HighOctober 4, 2026
• stylemix motors – car dealership & classified listings plugin Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters CVE-2026-6806 7.5 HighSeptember 30, 2026
• stylemix masterstudy lms MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass CVE-2026-88848 4.2 MediumSeptember 25, 2026
• stylemix motors – car dealership & classified listings plugin Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure CVE-2026-16750 5.3 MediumSeptember 17, 2026
• stylemix checkout custom fields builder for woocommerce Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter CVE-2026-19802 4.3 MediumSeptember 9, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability CVE-2026-78284 8.6 HighAugust 24, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability CVE-2026-73404 6.5 MediumAugust 18, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability CVE-2026-68568 6.3 MediumAugust 18, 2026
• stylemix motors WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability CVE-2026-66693 6.5 MediumAugust 13, 2026
• stylemix cost calculator builder Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure CVE-2026-7753 6.5 MediumAugust 5, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability CVE-2026-28145 5.3 MediumJuly 31, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion CVE-2026-5060 6.5 MediumJuly 29, 2026
• stylemix ulisting WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability CVE-2026-27392 4.3 MediumJuly 23, 2026
• stylemix ulisting WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability CVE-2026-27391 5.4 MediumJuly 23, 2026
• stylemix cost calculator builder Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys CVE-2026-10865 5.3 MediumJuly 11, 2026
• stylemix motors – car dealership & classified listings plugin Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info CVE-2026-13114 7.2 HighJuly 11, 2026
• stylemix motors – car dealership & classified listings plugin Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter CVE-2026-12435 4.3 MediumJuly 1, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability CVE-2026-57330 6.5 MediumJune 29, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability CVE-2026-57640 4.3 MediumJune 26, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability CVE-2026-40766 8.5 HighJune 15, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability CVE-2026-42730 8.5 HighMay 27, 2026
• stylemix motors – car dealership & classified listings plugin Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter CVE-2026-3892 8.1 HighMay 14, 2026
• stylemix cost calculator builder Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference CVE-2025-14755 5.3 MediumMay 13, 2026
• stylemix motors – car dealership & classified listings plugin Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter CVE-2026-1934 4.3 MediumMay 12, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters CVE-2026-4817 6.5 MediumApril 17, 2026
• stylemix ulisting WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability CVE-2026-28078 4.9 MediumMarch 5, 2026
• stylemix ulisting WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability CVE-2026-28138 7.2 HighFebruary 26, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode CVE-2026-0559 6.4 MediumFebruary 14, 2026
• stylemix cost calculator builder Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass CVE-2025-14757 5.3 MediumJanuary 16, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion CVE-2025-13766 5.4 MediumJanuary 6, 2026
• stylemix cost calculator builder Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion CVE-2025-12529 8.8 HighDecember 2, 2025
• stylemix cost calculator builder WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerability CVE-2025-62049 6.5 MediumNovember 6, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability CVE-2025-64366 7.6 HighOctober 31, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability CVE-2025-59575 4.9 MediumOctober 22, 2025
• stylemix motors – car dealership & classified listings plugin Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2025-10494 8.1 HighOctober 8, 2025
• stylemix cost calculator builder Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions CVE-2025-9243 8.1 HighOctober 4, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability CVE-2025-59576 6.5 MediumSeptember 22, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability CVE-2025-59577 4.3 MediumSeptember 22, 2025
• Show olderLoading…