Stylemix vulnerabilities
92 CVEs and advisories name Stylemix as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-31414WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-13737Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation
- CVE-2025-1653Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
- CVE-2025-1657Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection
- CVE-2025-25150WordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability
- CVE-2025-25151WordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerability
- CVE-2024-10970Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title
- CVE-2024-12206Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion
- CVE-2024-37093WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-47344WordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerability
- CVE-2024-6012Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation
- CVE-2024-6011Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2024-5545Motors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorization
- CVE-2024-5468WordPress Header Builder Plugin – Pearl <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options Deletion
- CVE-2024-4000WordPress Header Builder Plugin – Pearl <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-3942MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization
- CVE-2024-3136MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template
- CVE-2024-1904MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts
- CVE-2024-2411MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
- CVE-2024-2409MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action
- CVE-2024-2106MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route
- CVE-2024-1512MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
- CVE-2021-4381uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
- CVE-2021-4370uListing <= 1.6.6 - Missing Authorization
- CVE-2021-4357uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
- CVE-2021-4345uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
- CVE-2021-4346uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
- CVE-2021-4343uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
- CVE-2021-4341uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
- CVE-2021-4340uListing <= 1.6.6 - Unauthenticated SQL Injection