Login Request a demo
ST
Vendor
stylemix
10 products with CVEs on record
64
CVEs
0
On KEV
4
New 30D
Products
UL
uListing
Stylemix
9.3
11 CVEs0 on KEV2 new
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.8
13 CVEs0 on KEV2 new
ML
MasterStudy LMS
Stylemix
8.8
14 CVEs0 on KEV0 new
CC
Cost Calculator Builder
stylemix
9.3
11 CVEs0 on KEV0 new
MO
Motors
Stylemix
8.8
5 CVEs0 on KEV0 new
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
6.5
4 CVEs0 on KEV0 new
DL
Directory Listings WordPress plugin – uListing
stylemix
8.8
2 CVEs0 on KEV0 new
PE
Pearl
Stylemix
5.4
2 CVEs0 on KEV0 new
CC
Checkout Custom Fields Builder for WooCommerce
stylemix
4.3
1 CVEs0 on KEV0 new
PH
Pearl – Header Builder
stylemix
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-62033
UL
uListing
Stylemix
7.6
0%
Oct 10WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability
CVE-2026-62031
UL
uListing
Stylemix
9.3
0%
Oct 10WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
CVE-2026-96563
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
6.4
0%
Oct 10Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter
CVE-2026-6806
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
7.5
0%
Sep 30Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters
CVE-2026-16750
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
5.3
0%
Sep 17Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
CVE-2026-19802
CC
Checkout Custom Fields Builder for WooCommerce
stylemix
4.3
1%
Sep 9Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter
CVE-2026-78284
ML
MasterStudy LMS
Stylemix
8.6
1%
Aug 24WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability
CVE-2026-73404
ML
MasterStudy LMS
Stylemix
6.5
0%
Aug 18WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability
CVE-2026-68568
ML
MasterStudy LMS
Stylemix
6.3
0%
Aug 18WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability
CVE-2026-66693
MO
Motors
Stylemix
6.5
0%
Aug 13WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability
CVE-2026-7753
CC
Cost Calculator Builder
stylemix
6.5
1%
Aug 5Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
CVE-2026-5060
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
6.5
0%
Jul 29MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion
CVE-2026-27392
UL
uListing
Stylemix
4.3
0%
Jul 23WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-27391
UL
uListing
Stylemix
5.4
0%
Jul 23WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-10865
CC
Cost Calculator Builder
stylemix
5.3
1%
Jul 11Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys
CVE-2026-13114
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
7.2
0%
Jul 11Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info
CVE-2026-12435
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
Jul 1Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter
CVE-2026-57330
ML
MasterStudy LMS
Stylemix
6.5
0%
Jun 29WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57640
ML
MasterStudy LMS
Stylemix
4.3
0%
Jun 26WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability
CVE-2026-42730
ML
MasterStudy LMS
Stylemix
8.5
0%
May 27WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability
CVE-2026-3892
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.1
0%
May 14Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter
CVE-2025-14755
CC
Cost Calculator Builder
stylemix
5.3
0%
May 13Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference
CVE-2026-1934
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
May 12Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter
CVE-2026-4817
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
6.5
0%
Apr 17MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters
CVE-2026-28078
UL
uListing
Stylemix
4.9
0%
Mar 5WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability
CVE-2026-28138
UL
uListing
Stylemix
7.2
0%
Feb 26WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability
CVE-2026-0559
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
6.4
0%
Feb 14MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode
CVE-2025-14757
CC
Cost Calculator Builder
stylemix
5.3
0%
Jan 16Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
CVE-2025-13766
ML
MasterStudy LMS WordPress Plugin – for Online Courses and Education
stylemix
5.4
0%
Jan 6MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion
CVE-2025-12529
CC
Cost Calculator Builder
stylemix
8.8
1%
Dec 2Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
CVE-2025-62049
CC
Cost Calculator Builder
Stylemix
6.5
0%
Nov 6WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerability
CVE-2025-64366
ML
MasterStudy LMS
Stylemix
7.6
0%
Oct 31WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability
CVE-2025-59575
ML
MasterStudy LMS
Stylemix
4.9
0%
Oct 22WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability
CVE-2025-10494
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.1
1%
Oct 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion
CVE-2025-9243
CC
Cost Calculator Builder
stylemix
8.1
0%
Oct 4Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
CVE-2025-59576
ML
MasterStudy LMS
Stylemix
6.5
0%
Sep 22WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability
CVE-2025-59577
ML
MasterStudy LMS
Stylemix
4.3
0%
Sep 22WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability
CVE-2025-54744
ML
MasterStudy LMS
Stylemix
6.5
0%
Sep 5WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability
CVE-2025-54691
MO
Motors
Stylemix
5.3
0%
Aug 14WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability
CVE-2025-48277
CC
Cost Calculator Builder
Stylemix
5.9
0%
May 19WordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-32662
UL
uListing
Stylemix
8.8
0%
Apr 17WordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerability
CVE-2025-39587
CC
Cost Calculator Builder
Stylemix
9.3
0%
Apr 17WordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection Vulnerability
CVE-2025-2128
CC
Cost Calculator Builder
stylemix
6.5
0%
Apr 11Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
CVE-2025-32654
MO
Motors
Stylemix
8.1
1%
Apr 11WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
CVE-2025-3437
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
Apr 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
CVE-2025-2808
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
5.4
0%
Apr 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-2807
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
8.8
1%
Apr 8Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
CVE-2025-32237
ML
MasterStudy LMS
Stylemix
4.3
0%
Apr 4WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability
CVE-2025-32170
MO
Motors
Stylemix
6.5
0%
Apr 4WordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32142
MO
Motors
Stylemix
8.8
1%
Apr 4WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
CVE-2025-32141
ML
MasterStudy LMS
Stylemix
8.8
1%
Apr 4WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability
CVE-2025-32122
UL
uListing
Stylemix
7.6
1%
Apr 4WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
CVE-2025-31881
PE
Pearl
Stylemix
5.4
0%
Apr 1WordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerability
CVE-2025-31880
PE
Pearl
Stylemix
4.3
0%
Apr 1WordPress Pearl plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31414
CC
Cost Calculator Builder
Stylemix
6.5
0%
Mar 31WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability
CVE-2024-13737
MC
Motors – Car Dealership & Classified Listings Plugin
stylemix
4.3
0%
Mar 22Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation
CVE-2025-1653
DL
Directory Listings WordPress plugin – uListing
stylemix
8.8
1%
Mar 15Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
CVE-2025-1657
DL
Directory Listings WordPress plugin – uListing
stylemix
8.8
0%
Mar 15Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection
CVE-2025-25150
UL
uListing
Stylemix
9.3
0%
Mar 3WordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability
CVE-2025-25151
UL
uListing
Stylemix
8.5
0%
Feb 7WordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerability