Stylemix vulnerabilities
92 CVEs and advisories name Stylemix as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-28078WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability
- CVE-2026-28138WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability
- CVE-2026-0559MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode
- CVE-2025-14757Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
- CVE-2025-13766MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion
- CVE-2025-12529Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
- CVE-2025-62049WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerability
- CVE-2025-64366WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability
- CVE-2025-59575WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability
- CVE-2025-10494Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion
- CVE-2025-9243Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
- CVE-2025-59576WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability
- CVE-2025-59577WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability
- CVE-2025-54744WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability
- CVE-2025-54691WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability
- CVE-2025-48277WordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-32662WordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerability
- CVE-2025-39587WordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection Vulnerability
- CVE-2025-2128Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
- CVE-2025-32654WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
- CVE-2025-3437Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
- CVE-2025-2808Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2025-2807Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
- CVE-2025-32237WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability
- CVE-2025-32170WordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-32142WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
- CVE-2025-32141WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability
- CVE-2025-32122WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
- CVE-2025-31881WordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerability
- CVE-2025-31880WordPress Pearl plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability