stylemixthemes Vulnerability Advisory Catalog

Total 62 security vulnerabilities recorded for stylemixthemes software and firmware.

← Back to All Vendors
Component: cost_calculator_builder

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions up to, and including, 3.6.9 on...

๐Ÿ“… 2026-01-16
CVSS 5.3 Dossier →
CVE-2025-3437 MEDIUM
Component: motors_-_car_dealer\,_classifieds_\&_listing

The Motors โ€“ Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa...

๐Ÿ“… 2025-04-08
CVSS 4.3 Dossier →
CVE-2025-2808 MEDIUM
Component: motors_-_car_dealer\,_classifieds_\&_listing

The Motors โ€“ Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Phone Number parame...

๐Ÿ“… 2025-04-08
CVSS 5.4 Dossier →
Component: motors_-_car_dealer\,_classifieds_\&_listing

The Motors โ€“ Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capabil...

๐Ÿ“… 2025-04-08
CVSS 8.8 Dossier →
Component: motors_-_car_dealer\,_classifieds_\&_listing

The Motors โ€“ Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che...

๐Ÿ“… 2025-03-22
CVSS 4.3 Dossier →
Component: ulisting

The Directory Listings WordPress plugin โ€“ uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection du...

๐Ÿ“… 2025-03-15
CVSS 8.8 Dossier →
Component: ulisting

The Directory Listings WordPress plugin โ€“ uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2....

๐Ÿ“… 2025-03-15
CVSS 8.8 Dossier →
Component: motors_-_car_dealer\,_classifieds_\&_listing

The The Motors โ€“ Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and incl...

๐Ÿ“… 2025-01-16
CVSS 5.4 Dossier →
Component: masterstudy_lms

Cross-Site Request Forgery (CSRF) vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forge...

๐Ÿ“… 2025-01-02
CVSS 4.3 Dossier →
Component: cost_calculator_builder

The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged ...

๐Ÿ“… 2024-12-18
CVSS 5.4 Dossier →
Component: masterstudy_lms

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This i...

๐Ÿ“… 2024-11-01
CVSS 8.2 Dossier →
Component: cost_calculator_builder

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leadi...

๐Ÿ“… 2024-09-30
CVSS 7.2 Dossier →
CVE-2024-6010 MEDIUM
Component: cost_calculator_builder

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to t...

๐Ÿ“… 2024-09-07
CVSS 5.3 Dossier →
CVE-2024-43144 CRITICAL
Component: cost_calculator_builder

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Cost Calculator Builder allows SQ...

๐Ÿ“… 2024-08-29
CVSS 9.3 Dossier →
Component: masterstudy_lms

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used ...

๐Ÿ“… 2024-07-22
CVSS 8.8 Dossier →
Component: consulting_elementor_widgets

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Masterstudy Elementor Widgets, St...

๐Ÿ“… 2024-07-09
CVSS 8.5 Dossier →
CVE-2024-6012 MEDIUM
Component: cost_calculator_builder

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'embed-cr...

๐Ÿ“… 2024-07-02
CVSS 4.3 Dossier →
CVE-2024-6011 MEDIUM
Component: cost_calculator_builder

The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the โ€˜textarea.descriptionโ€™ parameter in all versions...

๐Ÿ“… 2024-07-02
CVSS 4.4 Dossier →
CVE-2024-5545 MEDIUM
Component: motors_-_car_dealer\,_classifieds_\&_listing

The Motors โ€“ Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che...

๐Ÿ“… 2024-07-02
CVSS 5.3 Dossier →
Component: consulting_elementor_widgets

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP...

๐Ÿ“… 2024-06-24
CVSS 8.5 Dossier →
CVE-2024-37091 CRITICAL
Component: consulting_elementor_widgets

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets, Styl...

๐Ÿ“… 2024-06-24
CVSS 9.9 Dossier →
CVE-2024-37089 CRITICAL
Component: consulting_elementor_widgets

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP...

๐Ÿ“… 2024-06-24
CVSS 9.0 Dossier →
CVE-2024-35677 CRITICAL
Component: mega_menu

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusio...

๐Ÿ“… 2024-06-10
CVSS 9.0 Dossier →
CVE-2024-3942 MEDIUM
Component: masterstudy_lms

The MasterStudy LMS WordPress Plugin โ€“ for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and l...

๐Ÿ“… 2024-05-02
CVSS 6.3 Dossier →
Page 1 of 3 (62 Total Records)