CVEs we hold for Stylemixthemes
Records whose assigning authority named Stylemixthemes as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8653MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' ParameterStylemixThemes MasterStudy LMS Pro
CVE-2026-54828WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerabilityStylemixThemes Motors
CVE-2026-54814WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerabilityStylemixThemes Motors
CVE-2026-40766WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerabilityStylemixThemes MasterStudy LMS
CVE-2026-39515WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerabilityStylemixThemes Motors
CVE-2026-28145WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS
CVE-2026-27433WordPress Motors theme <= 5.6.80 - Broken Access Control vulnerabilityStylemixThemes Motors
CVE-2026-27412WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerabilityStylemixThemes Pearl - Corporate Business
CVE-2026-14900Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' ParameterStylemixThemes Cost Calculator Builder PRO
CVE-2026-14805Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAXStylemixThemes Consulting - Business, Finance WordPress…
CVE-2025-7438MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes MasterStudy LMS Pro
CVE-2025-68063WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion…StylemixThemes Splash - Sport Club WordPress Theme for…
CVE-2025-64374WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerabilityStylemixThemes Motors
CVE-2025-64364WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerabilityStylemixThemes Masterstudy
CVE-2025-64361WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2025-64360WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2025-64359WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerabilityStylemixThemes Consulting
CVE-2025-64215WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64214WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64213WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64212WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS Pro
CVE-2025-64211WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2025-64210WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2025-64209WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerabilityStylemixThemes Masterstudy
CVE-2025-4800MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes MasterStudy LMS Pro
CVE-2025-47586WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes Motors - Events
CVE-2025-4322Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account TakeoverStylemixThemes Motors - Car Dealer, Rental & Listing…
CVE-2025-26986WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerabilityStylemixThemes Pearl - Corporate Business
CVE-2024-6010Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price ManipulationStylemixThemes Cost Calculator Builder PRO
CVE-2024-4789Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request ForgeryStylemixThemes Cost Calculator Builder PRO
CVE-2024-4787Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email SendingStylemixThemes Cost Calculator Builder PRO
CVE-2024-43990WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerabilityStylemixThemes Masterstudy LMS Starter
CVE-2024-43144WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerabilityStylemixThemes Cost Calculator Builder
CVE-2024-4097Cost Calculator Builder Pro <= 3.1.67 - Unauthenticated Cross-Site Scripting via SVG UploadStylemixThemes Cost Calculator Builder PRO
CVE-2024-37269WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2024-37094WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS
CVE-2024-37092WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2024-37091WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerabilityStylemixThemes Masterstudy Elementor Widgets
CVE-2024-37090SQL Injection vulnerability in multiple StylemixThemes premium themesStylemixThemes Consulting Elementor Widgets
CVE-2024-37089WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes Consulting Elementor Widgets
CVE-2024-35677WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerabilityStylemixThemes MegaMenu
CVE-2024-13738Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode ExecutionStylemixThemes Motors - Car Dealer, Rental & Listing…
CVE-2024-11939Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via dataStylemixThemes Cost Calculator Builder PRO
CVE-2023-50852WordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL InjectionStylemixThemes Booking Calendar | Appointment Booking |…
CVE-2023-46208WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)StylemixThemes Motors – Car Dealer, Classifieds & Listing
CVE-2023-46207WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)StylemixThemes Motors – Car Dealer, Classifieds & Listing
CVE-2023-40011WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerabilityStylemixThemes Cost Calculator Builder
CVE-2023-35093WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access ControlStylemixThemes MasterStudy LMS WordPress Plugin – for…
CVE-2023-35090WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)StylemixThemes MasterStudy LMS WordPress Plugin – for…
CVE-2022-45815WordPress GDPR Compliance & Cookie Consent Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)StylemixThemes GDPR Compliance & Cookie Consent
CVE-2022-43472WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerabilityStylemixThemes eRoom – Zoom Meetings & Webinar
CVE-2022-38716WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)StylemixThemes Motors – Car Dealer, Classifieds & Listing
CVE-2022-38356WordPress Pearl Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)StylemixThemes WordPress Header Builder Plugin – Pearl
CVE-2022-25615WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache DeletionStylemixThemes eRoom – Zoom Meetings & Webinar (WordPress…
CVE-2022-25614WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerabilityStylemixThemes eRoom – Zoom Meetings & Webinar (WordPress…
CVE-2021-36880WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36879WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36878WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36877WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerabilityStylemixThemes uListing (WordPress plugin)
CVE-2021-36876WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesStylemixThemes uListing (WordPress plugin)
CVE-2021-36874WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerabilityStylemixThemes uListing (WordPress plugin)
63 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.