CVEs we hold for Stylemix
Records whose assigning authority named Stylemix as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8653MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' ParameterStylemixThemes MasterStudy LMS Pro
CVE-2026-78284WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerabilityStylemix MasterStudy LMS
CVE-2026-7753Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information…stylemix Cost Calculator Builder
CVE-2026-73404WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerabilityStylemix MasterStudy LMS
CVE-2026-68568WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerabilityStylemix MasterStudy LMS
CVE-2026-66693WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerabilityStylemix Motors
CVE-2026-57640WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerabilityStylemix MasterStudy LMS
CVE-2026-57330WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerabilityStylemix MasterStudy LMS
CVE-2026-54828WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerabilityStylemixThemes Motors
CVE-2026-54814WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerabilityStylemixThemes Motors
CVE-2026-5060MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to…stylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2026-4817MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby'…stylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2026-42730WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerabilityStylemix MasterStudy LMS
CVE-2026-40766WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerabilityStylemixThemes MasterStudy LMS
CVE-2026-39515WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerabilityStylemixThemes Motors
CVE-2026-3892Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via…stylemix Motors – Car Dealership & Classified Listings…
CVE-2026-28145WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS
CVE-2026-28138WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerabilityStylemix uListing
CVE-2026-28078WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerabilityStylemix uListing
CVE-2026-27433WordPress Motors theme <= 5.6.80 - Broken Access Control vulnerabilityStylemixThemes Motors
CVE-2026-27412WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerabilityStylemixThemes Pearl - Corporate Business
CVE-2026-27392WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerabilityStylemix uListing
CVE-2026-27391WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerabilityStylemix uListing
CVE-2026-19802Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+)…stylemix Checkout Custom Fields Builder for WooCommerce
CVE-2026-1934Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+)…stylemix Motors – Car Dealership & Classified Listings…
CVE-2026-16750Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated…stylemix Motors – Car Dealership & Classified Listings…
CVE-2026-14900Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' ParameterStylemixThemes Cost Calculator Builder PRO
CVE-2026-14805Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAXStylemixThemes Consulting - Business, Finance WordPress…
CVE-2026-13114Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Infostylemix Motors – Car Dealership & Classified Listings…
CVE-2026-12435Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via…stylemix Motors – Car Dealership & Classified Listings…
CVE-2026-10865Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keysstylemix Cost Calculator Builder
CVE-2026-0559MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored…stylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2025-9243Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via…stylemix Cost Calculator Builder
CVE-2025-7438MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes MasterStudy LMS Pro
CVE-2025-68063WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion…StylemixThemes Splash - Sport Club WordPress Theme for…
CVE-2025-64374WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerabilityStylemixThemes Motors
CVE-2025-64366WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerabilityStylemix MasterStudy LMS
CVE-2025-64364WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerabilityStylemixThemes Masterstudy
CVE-2025-64361WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2025-64360WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2025-64359WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerabilityStylemixThemes Consulting
CVE-2025-64215WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64214WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64213WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64212WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64211WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2025-64210WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2025-64209WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerabilityStylemixThemes Masterstudy
CVE-2025-62049WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerabilityStylemix Cost Calculator Builder
CVE-2025-59577WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition VulnerabilityStylemix MasterStudy LMS
CVE-2025-59576WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control VulnerabilityStylemix MasterStudy LMS
CVE-2025-59575WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerabilityStylemix MasterStudy LMS
CVE-2025-54744WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerabilityStylemix MasterStudy LMS
CVE-2025-54691WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityStylemix Motors
CVE-2025-48277WordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) VulnerabilityStylemix Cost Calculator Builder
CVE-2025-4800MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes MasterStudy LMS Pro
CVE-2025-47586WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes Motors - Events
CVE-2025-4322Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account TakeoverStylemixThemes Motors - Car Dealer, Rental & Listing…
CVE-2025-39587WordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection VulnerabilityStylemix Cost Calculator Builder
CVE-2025-3437Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+)…stylemix Motors – Car Dealership & Classified Listings…
CVE-2025-32662WordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerabilityStylemix uListing
CVE-2025-32237WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerabilityStylemix MasterStudy LMS
CVE-2025-32170WordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerabilityStylemix Motors
CVE-2025-32141WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerabilityStylemix MasterStudy LMS
CVE-2025-31880WordPress Pearl plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerabilityStylemix Pearl
CVE-2025-31414WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerabilityStylemix Cost Calculator Builder
CVE-2025-2808Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scriptingstylemix Motors – Car Dealership & Classified Listings…
CVE-2025-2807Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+)…stylemix Motors – Car Dealership & Classified Listings…
CVE-2025-26986WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerabilityStylemixThemes Pearl - Corporate Business
CVE-2025-2128Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameterstylemix Cost Calculator Builder
CVE-2025-1657Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+)…stylemix Directory Listings WordPress plugin – uListing
CVE-2025-1653Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalationstylemix Directory Listings WordPress plugin – uListing
CVE-2025-14757Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypassstylemix Cost Calculator Builder
CVE-2025-14755Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Referencestylemix Cost Calculator Builder
CVE-2025-13766MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated…stylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2025-12529Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletionstylemix Cost Calculator Builder
CVE-2025-10494Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletionstylemix Motors – Car Dealership & Classified Listings…
CVE-2024-6012Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creationstylemix Cost Calculator Builder
CVE-2024-6011Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scriptingstylemix Cost Calculator Builder
CVE-2024-6010Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price ManipulationStylemixThemes Cost Calculator Builder PRO
CVE-2024-5545Motors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorizationstylemix Motors – Car Dealership & Classified Listings…
CVE-2024-5468WordPress Header Builder Plugin – Pearl <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options…stylemix Pearl – Header Builder
CVE-2024-4789Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request ForgeryStylemixThemes Cost Calculator Builder PRO
CVE-2024-4787Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email SendingStylemixThemes Cost Calculator Builder PRO
CVE-2024-47344WordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityStylemix uListing
CVE-2024-43990WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerabilityStylemixThemes Masterstudy LMS Starter
CVE-2024-43144WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerabilityStylemixThemes Cost Calculator Builder
CVE-2024-4097Cost Calculator Builder Pro <= 3.1.67 - Unauthenticated Cross-Site Scripting via SVG UploadStylemixThemes Cost Calculator Builder PRO
CVE-2024-4000WordPress Header Builder Plugin – Pearl <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via…stylemix Pearl – Header Builder
CVE-2024-3942MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorizationstylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2024-37269WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2024-37094WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS
CVE-2024-37093WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityStylemix MasterStudy LMS
CVE-2024-37092WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2024-37091WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2024-37090SQL Injection vulnerability in multiple StylemixThemes premium themesStylemixThemes Consulting Elementor Widgets
CVE-2024-37089WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2024-35677WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes MegaMenu
CVE-2024-3136MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via templatestylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2024-2411MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modalstylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2024-2409MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Actionstylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2024-2106MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST…stylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2024-1904MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_postsstylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2024-1512MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injectionstylemix MasterStudy LMS WordPress Plugin – for Online…
CVE-2024-13738Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode ExecutionStylemixThemes Motors - Car Dealer, Rental & Listing…
CVE-2024-13737Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary…stylemix Motors – Car Dealership & Classified Listings…
CVE-2024-12206Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletionstylemix Pearl – Header Builder
CVE-2024-11939Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via dataStylemixThemes Cost Calculator Builder PRO
CVE-2024-10970Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via…stylemix Motors – Car Dealership & Classified Listings…
CVE-2023-50852WordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL InjectionStylemixThemes Booking Calendar | Appointment Booking |…
CVE-2023-46208WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)StylemixThemes Motors – Car Dealer, Classifieds & Listing
CVE-2023-46207WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)StylemixThemes Motors – Car Dealer, Classifieds & Listing
CVE-2023-40011WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerabilityStylemixThemes Cost Calculator Builder
CVE-2023-35093WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access ControlStylemixThemes MasterStudy LMS WordPress Plugin – for…
CVE-2023-35090WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)StylemixThemes MasterStudy LMS WordPress Plugin – for…
CVE-2022-45815WordPress GDPR Compliance & Cookie Consent Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)StylemixThemes GDPR Compliance & Cookie Consent
CVE-2022-43472WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerabilityStylemixThemes eRoom – Zoom Meetings & Webinar
CVE-2022-38716WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)StylemixThemes Motors – Car Dealer, Classifieds & Listing
CVE-2022-38356WordPress Pearl Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)StylemixThemes WordPress Header Builder Plugin – Pearl
CVE-2022-25615WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache DeletionStylemixThemes eRoom – Zoom Meetings & Webinar (WordPress…
CVE-2022-25614WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerabilityStylemixThemes eRoom – Zoom Meetings & Webinar (WordPress…
CVE-2021-4381uListing <= 1.6.6 - Unauthenticated Options Changes via wp_routestylemix Directory Listings WordPress plugin – uListing
CVE-2021-4370uListing <= 1.6.6 - Missing Authorizationstylemix Directory Listings WordPress plugin – uListing
CVE-2021-4357uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletionstylemix Directory Listings WordPress plugin – uListing
CVE-2021-4346uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changesstylemix Directory Listings WordPress plugin – uListing
CVE-2021-4345uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletionstylemix Directory Listings WordPress plugin – uListing
CVE-2021-4343uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creationstylemix Directory Listings WordPress plugin – uListing
CVE-2021-4341uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAXstylemix Directory Listings WordPress plugin – uListing
CVE-2021-4340uListing <= 1.6.6 - Unauthenticated SQL Injectionstylemix Directory Listings WordPress plugin – uListing
CVE-2021-4339uListing <= 1.6.6 - Unauthenticated Information Disclosurestylemix Directory Listings WordPress plugin – uListing
CVE-2021-36880WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36879WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36878WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36877WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36876WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesStylemixThemes uListing (WordPress plugin)
CVE-2021-36875WordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerabilityStylemix Directory Listings WordPress plugin – uListing
CVE-2021-36874WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerabilityStylemixThemes uListing (WordPress plugin)
145 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.