stylemixthemes Vulnerability Advisory Catalog

Total 62 security vulnerabilities recorded for stylemixthemes software and firmware.

← Back to All Vendors
Component: pearl_header_builder

Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes WordPress Header Builder Plugin – Pearl plugin <= 1.3.4 versions....

📅 2023-05-25
CVSS 5.4 Dossier →
Component: motors_-_car_dealer\,_classifieds_\&_listing

The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .php) in an AJAX action, allowing...

📅 2022-12-12
CVSS 8.8 Dossier →
Component: eroom_-_zoom_meetings_\&_webinar

Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows cache deletion....

📅 2022-04-11
CVSS 4.3 Dossier →
Component: eroom_-_zoom_meetings_\&_webinar

Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows an attacker to Sync with Zoom M...

📅 2022-04-11
CVSS 4.3 Dossier →
CVE-2022-0441 CRITICAL
Component: masterstudy_lms

The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated user...

📅 2022-03-07
CVSS 9.8 Dossier →
Component: ulisting

Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom....

📅 2021-09-27
CVSS 8.6 Dossier →
CVE-2021-36879 CRITICAL
Component: ulisting

Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user r...

📅 2021-09-27
CVSS 9.8 Dossier →
Component: ulisting

Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to modify user roles....

📅 2021-09-27
CVSS 4.3 Dossier →
Component: ulisting

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administ...

📅 2021-09-27
CVSS 5.4 Dossier →
Component: ulisting

Cross-site Scripting (XSS) vulnerability in Stylemix Directory Listings WordPress plugin – uListing allows Reflected XSS.This issue affects Directory ...

📅 2021-09-27
CVSS 5.9 Dossier →
Component: ulisting

Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5)....

📅 2021-09-27
CVSS 7.1 Dossier →
Component: ulisting

Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to update settings....

📅 2021-09-27
CVSS 4.3 Dossier →
Component: motors_-_car_dealer\,_classifieds_\&_listing

includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress ha...

📅 2020-02-24
CVSS 6.1 Dossier →
Component: motors_-_car_dealer\,_classifieds_\&_listing

includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress al...

📅 2020-02-24
CVSS 6.5 Dossier →
Page 3 of 3 (62 Total Records)