Skip to contentStylemix vulnerabilities
Newest
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerabilityCVE-2025-547446.5 Medium
- stylemix motorsWordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityCVE-2025-546915.3 Medium
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-482775.9 Medium
- stylemix ulistingWordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerabilityCVE-2025-326628.8 High
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection VulnerabilityCVE-2025-395879.3 Critical
- stylemix cost calculator builderCost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids ParameterCVE-2025-21286.5 Medium
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerabilityCVE-2025-326548.1 High
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-upCVE-2025-34374.3 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2025-28085.4 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin InstallationCVE-2025-2807Public exploit8.8 High
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerabilityCVE-2025-322374.3 Medium
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-321706.5 Medium
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerabilityCVE-2025-321428.8 High
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerabilityCVE-2025-321418.8 High
- stylemix ulistingWordPress uListing plugin <= 2.2.0 - SQL Injection vulnerabilityCVE-2025-321227.6 High
- stylemix pearlWordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerabilityCVE-2025-318815.4 Medium
- stylemix pearlWordPress Pearl plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-318804.3 Medium
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-314146.5 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template CreationCVE-2024-137374.3 Medium
- stylemix directory listings wordpress plugin – ulisting, stylemixthemes ulisting +1 moreDirectory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege EscalationCVE-2025-16538.8 High
- stylemix directory listings wordpress plugin – ulisting, stylemixthemes ulisting +1 moreDirectory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object InjectionCVE-2025-16578.8 High
- stylemix ulistingWordPress uListing plugin <= 2.1.6 - SQL Injection vulnerabilityCVE-2025-251509.3 Critical
- stylemix ulistingWordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerabilityCVE-2025-251518.5 High
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom TitleCVE-2024-109705.4 Medium
- stylemix pearl – header builderWordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header DeletionCVE-2024-122064.3 Medium
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-370934.3 Medium
- stylemix cost calculator builderCost Calculator Builder < 3.2.43 - Settings update via CSRFCVE-2024-108925.4 Medium
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerabilityCVE-2023-400115.4 Medium
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerabilityCVE-2024-370948.2 High
- stylemix ulistingWordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityCVE-2024-473445.3 Medium
- stylemix cost calculator builderCost Calculator Builder < 3.2.29 - Admin+ SQL InjectionCVE-2024-83797.2 High
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerabilityCVE-2024-431449.3 Critical
- stylemix cost calculator builderCost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content CreationCVE-2024-60124.3 Medium
- stylemix cost calculator builderCost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-60114.4 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing AuthorizationCVE-2024-55455.3 Medium
- stylemix pearl – header builderWordPress Header Builder Plugin – Pearl <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options DeletionCVE-2024-54686.5 Medium
- stylemix pearl – header builderWordPress Header Builder Plugin – Pearl <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-40006.4 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing AuthorizationCVE-2024-39426.3 Medium
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via templateCVE-2024-31369.8 Critical
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_postsCVE-2024-19044.3 Medium
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modalCVE-2024-24119.8 Critical
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX ActionCVE-2024-24099.8 Critical
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST routeCVE-2024-21065.3 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL InjectionCVE-2024-1512Public exploitEPSS 77.7%9.8 Critical
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-462074.1 Medium
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-462087.1 High
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreWordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access ControlCVE-2023-350936.5 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreWordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-350906.5 Medium
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated Options Changes via wp_routeCVE-2021-43819.8 Critical
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Missing AuthorizationCVE-2021-43709.8 Critical
- Show moreLoading…