Skip to content
Stylemixthemes vulnerabilities
Newest
-
stylemixthemes motors
WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability
CVE-2026-123467
4.3 Medium
-
stylemixthemes motors
WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability
CVE-2026-123468
4.3 Medium
-
stylemix masterstudy lms
WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability
CVE-2026-119478
4.3 Medium
-
stylemix masterstudy lms
WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability
CVE-2026-118092
4.3 Medium
-
stylemixthemes motors
WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability
CVE-2026-115964
9.3 Critical
-
stylemixthemes motors
WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability
CVE-2026-93950
7.5 High
-
stylemix masterstudy lms
WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105079
6.5 Medium
-
stylemixthemes motors
WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability
CVE-2026-104399
6.9 Medium
-
stylemix cost calculator builder
WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability
CVE-2026-97307
7.5 High
-
stylemixthemes motors
Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured
CVE-2026-91023
3.1 Low
-
stylemixthemes motors
Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color
CVE-2026-91022
6.8 Medium
-
stylemixthemes motors
Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure
CVE-2026-91016
5.3 Medium
-
stylemixthemes consulting - business, finance wordpress theme
Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX
CVE-2026-14805
8.8 High
-
stylemix motors
WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability
CVE-2026-66693
6.5 Medium
-
stylemix masterstudy lms
WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability
CVE-2026-28145
5.3 Medium
-
stylemixthemes cost calculator builder pro
Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter
CVE-2026-14900
Public exploit
9.8 Critical
-
stylemixthemes motors
WordPress Motors theme < 5.6.85 - Broken Access Control vulnerability
CVE-2026-27433
6.5 Medium
-
stylemixthemes pearl - corporate business
WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability
CVE-2026-27412
8.1 High
-
stylemixthemes splash - sport club wordpress theme for basketball, football, hockey
WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability
CVE-2025-68063
7.5 High
-
stylemixthemes motors
WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerability
CVE-2026-54828
7.5 High
-
stylemixthemes motors
Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media
CVE-2026-7859
5.3 Medium
-
stylemixthemes motors
WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
CVE-2026-54812
9.3 Critical
-
stylemixthemes motors
WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability
CVE-2026-54814
8.1 High
-
stylemix masterstudy lms
WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability
CVE-2026-40766
8.5 High
-
stylemixthemes motors
WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerability
CVE-2026-39515
6.5 Medium
-
stylemixthemes masterstudy lms pro
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability
CVE-2025-64215
6.5 Medium
-
stylemixthemes masterstudy lms pro
MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter
CVE-2026-8653
6.5 Medium
-
stylemix cost calculator builder
Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
CVE-2025-14757
5.3 Medium
-
stylemixthemes motors
WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability
CVE-2025-64374
9.9 Critical
-
stylemixthemes masterstudy lms pro
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability
CVE-2025-64214
7.5 High
-
stylemixthemes masterstudy lms pro
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability
CVE-2025-64213
7.5 High
-
stylemixthemes masterstudy
WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerability
CVE-2025-64209
7.5 High
-
stylemixthemes masterstudy
WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability
CVE-2025-64364
7.5 High
-
stylemixthemes consulting elementor widgets
WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64361
6.5 Medium
-
stylemixthemes consulting elementor widgets
WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability
CVE-2025-64360
7.5 High
-
stylemixthemes consulting
WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability
CVE-2025-64359
7.5 High
-
stylemixthemes masterstudy lms pro
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability
CVE-2025-64212
5.4 Medium
-
stylemixthemes masterstudy elementor widgets
WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability
CVE-2025-64211
5.3 Medium
-
stylemixthemes masterstudy elementor widgets
WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability
CVE-2025-64210
5.4 Medium
-
stylemix motors
WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability
CVE-2025-54691
5.3 Medium
-
stylemixthemes masterstudy lms pro
MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-7438
7.5 High
-
stylemixthemes motors - events
WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability
CVE-2025-47586
9.0 Critical
-
stylemixthemes masterstudy lms pro
MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-4800
8.8 High
-
stylemixthemes motors - car dealer, rental & listing wordpress theme
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
CVE-2025-4322
Public exploit
EPSS 15.4%
9.8 Critical
-
stylemixthemes motors - car dealer, rental & listing wordpress theme
Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-13738
7.3 High
-
stylemix motors
WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
CVE-2025-32654
8.1 High
-
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 more
Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
CVE-2025-3437
4.3 Medium
-
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 more
Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-2808
5.4 Medium
-
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 more
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
CVE-2025-2807
Public exploit
8.8 High
-
stylemix motors
WordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32170
6.5 Medium
- Show olderLoading…