Login Request a demo
ST
Vendor
stylemix
11 products with CVEs on record
78
CVEs
0
On KEV
6
New 30D
Products
UL
uListing
Stylemix
9.3
11 CVEs0 on KEV2 new
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.8
14 CVEs0 on KEV2 new
ML
MasterStudy LMS WordPress Plugin
Stylemix
5.4
2 CVEs0 on KEV2 new
ML
MasterStudy LMS
Stylemix
8.8
14 CVEs0 on KEV0 new
CC
Cost Calculator Builder
stylemix
9.3
13 CVEs0 on KEV0 new
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
9.8
11 CVEs0 on KEV0 new
MO
Motors
Stylemix
8.8
5 CVEs0 on KEV0 new
PH
Pearl – Header Builder
stylemix
6.5
3 CVEs0 on KEV0 new
DL
Directory Listings WordPress plugin – uListing
stylemix
8.8
2 CVEs0 on KEV0 new
PE
Pearl
Stylemix
5.4
2 CVEs0 on KEV0 new
CC
Checkout Custom Fields Builder for WooCommerce
stylemix
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-80069
New
ML
MasterStudy LMS WordPress Plugin
Stylemix
4.3–Oct 29MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax
CVE-2026-80067
New
ML
MasterStudy LMS WordPress Plugin
Stylemix
5.4–Oct 29MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter
CVE-2026-62033
UL
uListing
Stylemix
7.6
0%
Oct 10WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability
CVE-2026-62031
UL
uListing
Stylemix
9.3
0%
Oct 10WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
CVE-2026-96563
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
6.4
0%
Oct 10Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter
CVE-2026-6806
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
7.5
0%
Sep 30Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters
CVE-2026-16750
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
5.3
0%
Sep 17Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
CVE-2026-19802
CC
Checkout Custom Fields Builder for WooCommerce
stylemix
4.3
1%
Sep 9Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter
CVE-2026-78284
ML
MasterStudy LMS
Stylemix
8.6
1%
Aug 24WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability
CVE-2026-73404
ML
MasterStudy LMS
Stylemix
6.5
0%
Aug 18WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability
CVE-2026-68568
ML
MasterStudy LMS
Stylemix
6.3
0%
Aug 18WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability
CVE-2026-66693
MO
Motors
Stylemix
6.5
0%
Aug 13WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability
CVE-2026-7753
CC
Cost Calculator Builder
stylemix
6.5
1%
Aug 5Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
CVE-2026-5060
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
6.5
0%
Jul 29MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion
CVE-2026-27392
UL
uListing
Stylemix
4.3
0%
Jul 23WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-27391
UL
uListing
Stylemix
5.4
0%
Jul 23WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-10865
CC
Cost Calculator Builder
stylemix
5.3
1%
Jul 11Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys
CVE-2026-13114
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
7.2
0%
Jul 11Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info
CVE-2026-12435
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
Jul 1Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter
CVE-2026-57330
ML
MasterStudy LMS
Stylemix
6.5
0%
Jun 29WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57640
ML
MasterStudy LMS
Stylemix
4.3
0%
Jun 26WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability
CVE-2026-42730
ML
MasterStudy LMS
Stylemix
8.5
0%
May 27WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability
CVE-2026-3892
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.1
0%
May 14Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter
CVE-2025-14755
CC
Cost Calculator Builder
stylemix
5.3
0%
May 13Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference
CVE-2026-1934
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
May 12Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter
CVE-2026-4817
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
6.5
0%
Apr 17MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters
CVE-2026-28078
UL
uListing
Stylemix
4.9
0%
Mar 5WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability
CVE-2026-28138
UL
uListing
Stylemix
7.2
0%
Feb 26WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability
CVE-2026-0559
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
6.4
0%
Feb 14MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode
CVE-2025-14757
CC
Cost Calculator Builder
stylemix
5.3
0%
Jan 16Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
CVE-2025-13766
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
5.4
0%
Jan 6MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion
CVE-2025-12529
CC
Cost Calculator Builder
stylemix
8.8
1%
Dec 2Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
CVE-2025-62049
CC
Cost Calculator Builder
Stylemix
6.5
0%
Nov 6WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerability
CVE-2025-64366
ML
MasterStudy LMS
Stylemix
7.6
0%
Oct 31WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability
CVE-2025-59575
ML
MasterStudy LMS
Stylemix
4.9
0%
Oct 22WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability
CVE-2025-10494
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.1
1%
Oct 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion
CVE-2025-9243
CC
Cost Calculator Builder
stylemix
8.1
0%
Oct 4Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
CVE-2025-59576
ML
MasterStudy LMS
Stylemix
6.5
0%
Sep 22WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability
CVE-2025-59577
ML
MasterStudy LMS
Stylemix
4.3
0%
Sep 22WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability
CVE-2025-54744
ML
MasterStudy LMS
Stylemix
6.5
0%
Sep 5WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability
CVE-2025-54691
MO
Motors
Stylemix
5.3
0%
Aug 14WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability
CVE-2025-48277
CC
Cost Calculator Builder
Stylemix
5.9
0%
May 19WordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-32662
UL
uListing
Stylemix
8.8
0%
Apr 17WordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerability
CVE-2025-39587
CC
Cost Calculator Builder
Stylemix
9.3
0%
Apr 17WordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection Vulnerability
CVE-2025-2128
CC
Cost Calculator Builder
stylemix
6.5
0%
Apr 11Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
CVE-2025-32654
MO
Motors
Stylemix
8.1
1%
Apr 11WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
CVE-2025-3437
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
Apr 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
CVE-2025-2808
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
5.4
0%
Apr 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-2807
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.8
1%
Apr 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
CVE-2025-32237
ML
MasterStudy LMS
Stylemix
4.3
0%
Apr 4WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability
CVE-2025-32170
MO
Motors
Stylemix
6.5
0%
Apr 4WordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32142
MO
Motors
Stylemix
8.8
1%
Apr 4WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
CVE-2025-32141
ML
MasterStudy LMS
Stylemix
8.8
1%
Apr 4WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability
CVE-2025-32122
UL
uListing
Stylemix
7.6
1%
Apr 4WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
CVE-2025-31881
PE
Pearl
Stylemix
5.4
0%
Apr 1WordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerability
CVE-2025-31880
PE
Pearl
Stylemix
4.3
0%
Apr 1WordPress Pearl plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31414
CC
Cost Calculator Builder
Stylemix
6.5
0%
Mar 31WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability
CVE-2024-13737
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
Mar 22Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation
CVE-2025-1653
DL
Directory Listings WordPress plugin – uListing
stylemix
8.8
1%
Mar 15Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
CVE-2025-1657
DL
Directory Listings WordPress plugin – uListing
stylemix
8.8
0%
Mar 15Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection