ST
Vendor
StylemixThemes
109
CVEs
0
On KEV
5
New 30D
Products
MO9.9
Motors
StylemixThemes
9 CVEs0 on KEV3 new
ML9.8
MasterStudy LMS
StylemixThemes
18 CVEs0 on KEV1 new
CC9.8
Cost Calculator Builder
StylemixThemes
9 CVEs0 on KEV1 new
UL9.8
Ulisting
Stylemixthemes
19 CVEs0 on KEV0 new
MC8.8
Motors - Car Dealer, Classifieds & Listing
Stylemixthemes
12 CVEs0 on KEV0 new
ML8.8
MasterStudy LMS Pro
StylemixThemes
7 CVEs0 on KEV0 new
CE9.8
Consulting Elementor Widgets
StylemixThemes
6 CVEs0 on KEV0 new
ME8.8
Masterstudy Elementor Widgets
StylemixThemes
5 CVEs0 on KEV0 new
CC9.8
Cost Calculator Builder PRO
StylemixThemes
4 CVEs0 on KEV0 new
EZ4.3
eRoom – Zoom Meetings & Webinar
StylemixThemes
3 CVEs0 on KEV0 new
BO9.8
Bookit
Stylemixthemes
2 CVEs0 on KEV0 new
MA7.5
Masterstudy
StylemixThemes
2 CVEs0 on KEV0 new
MC9.8
Motors - Car Dealer, Rental & Listing WordPress theme
StylemixThemes
2 CVEs0 on KEV0 new
PC8.1
Pearl - Corporate Business
StylemixThemes
2 CVEs0 on KEV0 new
CO7.5
Consulting
StylemixThemes
1 CVEs0 on KEV0 new
CB8.8
Consulting - Business, Finance WordPress Theme
StylemixThemes
1 CVEs0 on KEV0 new
GC8.8
Gdpr Compliance & Cookie Consent
Stylemixthemes
1 CVEs0 on KEV0 new
ML5.3
Masterstudy LMS Starter
StylemixThemes
1 CVEs0 on KEV0 new
MM9.8
Mega Menu
Stylemixthemes
1 CVEs0 on KEV0 new
ME9.8
MegaMenu
StylemixThemes
1 CVEs0 on KEV0 new
ME9.0
Motors - Events
StylemixThemes
1 CVEs0 on KEV0 new
PH8.8
Pearl Header Builder
Stylemixthemes
1 CVEs0 on KEV0 new
SS7.5
Splash - Sport Club WordPress Theme for Basketball, Football, Hockey
StylemixThemes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115964 New | MO Motors StylemixThemes | 9.3 | Oct 29 | WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability |
| CVE-2026-93950 | MO Motors StylemixThemes | 7.5 | Oct 10 | WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability |
| CVE-2026-105079 | ML MasterStudy LMS StylemixThemes | 6.5 | Oct 8 | WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-104399 | MO Motors StylemixThemes | 6.9 | Oct 6 | WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability |
| CVE-2026-97307 | CC Cost Calculator Builder StylemixThemes | 7.5 | Oct 4 | WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability |
| CVE-2026-14805 | CB Consulting - Business, Finance WordPress Theme StylemixThemes | 8.8 | Sep 15 | Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX |
| CVE-2026-28145 | ML MasterStudy LMS StylemixThemes | 5.3 | Jul 31 | WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability |
| CVE-2026-14900 | CC Cost Calculator Builder PRO StylemixThemes | 9.8 | Jul 29 | Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter |
| CVE-2026-27433 | MO Motors StylemixThemes | 6.5 | Jul 2 | WordPress Motors theme < 5.6.85 - Broken Access Control vulnerability |
| CVE-2026-27412 | PC Pearl - Corporate Business StylemixThemes | 8.1 | Jul 2 | WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability |
| CVE-2025-68063 | SS Splash - Sport Club WordPress Theme for Basketball, Football, Hockey StylemixThemes | 7.5 | Jun 26 | WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability |
| CVE-2026-54828 | MO Motors StylemixThemes | 7.5 | Jun 25 | WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerability |
| CVE-2026-54812 | MO Motors StylemixThemes | 9.3 | Jun 17 | WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability |
| CVE-2026-54814 | MO Motors StylemixThemes | 8.1 | Jun 17 | WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability |
| CVE-2026-40766 | ML MasterStudy LMS StylemixThemes | 8.5 | Jun 15 | WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability |
| CVE-2026-39515 | MO Motors StylemixThemes | 6.5 | Jun 15 | WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerability |
| CVE-2025-64215 | ML MasterStudy LMS Pro StylemixThemes | 6.5 | Jun 15 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability |
| CVE-2026-8653 | ML MasterStudy LMS Pro StylemixThemes | 6.5 | Jun 4 | MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter |
| CVE-2025-14757 | CC Cost Calculator Builder Stylemixthemes | 5.3 | Jan 16 | Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass |
| CVE-2025-64374 | MO Motors StylemixThemes | 9.9 | Dec 18 | WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability |
| CVE-2025-64214 | ML MasterStudy LMS Pro StylemixThemes | 7.5 | Dec 18 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability |
| CVE-2025-64213 | ML MasterStudy LMS Pro StylemixThemes | 7.5 | Dec 18 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability |
| CVE-2025-64209 | MA Masterstudy StylemixThemes | 7.5 | Dec 18 | WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerability |
| CVE-2025-64364 | MA Masterstudy StylemixThemes | 7.5 | Oct 31 | WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability |
| CVE-2025-64361 | CE Consulting Elementor Widgets StylemixThemes | 6.5 | Oct 31 | WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64360 | CE Consulting Elementor Widgets StylemixThemes | 7.5 | Oct 31 | WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability |
| CVE-2025-64359 | CO Consulting StylemixThemes | 7.5 | Oct 31 | WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability |
| CVE-2025-64212 | ML MasterStudy LMS Pro StylemixThemes | 5.4 | Oct 29 | WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability |
| CVE-2025-64211 | ME Masterstudy Elementor Widgets StylemixThemes | 5.3 | Oct 29 | WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability |
| CVE-2025-64210 | ME Masterstudy Elementor Widgets StylemixThemes | 5.4 | Oct 29 | WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability |
| CVE-2025-7438 | ML MasterStudy LMS Pro StylemixThemes | 7.5 | Jul 18 | MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-47586 | ME Motors - Events StylemixThemes | 9.0 | Jun 6 | WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability |
| CVE-2025-4800 | ML MasterStudy LMS Pro StylemixThemes | 8.8 | May 28 | MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-4322 | MC Motors - Car Dealer, Rental & Listing WordPress theme StylemixThemes | 9.8 | May 20 | Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover |
| CVE-2024-13738 | MC Motors - Car Dealer, Rental & Listing WordPress theme StylemixThemes | 7.3 | May 3 | Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode Execution |
| CVE-2025-3437 | MC Motors - Car Dealer, Classifieds & Listing Stylemixthemes | 4.3 | Apr 8 | Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up |
| CVE-2025-2808 | MC Motors - Car Dealer, Classifieds & Listing Stylemixthemes | 5.4 | Apr 8 | Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2025-2807 | MC Motors - Car Dealer, Classifieds & Listing Stylemixthemes | 8.8 | Apr 8 | Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation |
| CVE-2025-26986 | PC Pearl - Corporate Business StylemixThemes | 8.1 | Mar 26 | WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability |
| CVE-2024-13737 | MC Motors - Car Dealer, Classifieds & Listing Stylemixthemes | 4.3 | Mar 22 | Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation |
| CVE-2025-1653 | UL Ulisting Stylemixthemes | 8.8 | Mar 15 | Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation |
| CVE-2025-1657 | UL Ulisting Stylemixthemes | 8.8 | Mar 15 | Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection |
| CVE-2024-10970 | MC Motors - Car Dealer, Classifieds & Listing Stylemixthemes | 5.4 | Jan 16 | Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title |
| CVE-2024-11939 | CC Cost Calculator Builder PRO StylemixThemes | 7.5 | Jan 8 | Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data |
| CVE-2024-37093 | ML Masterstudy Lms Stylemixthemes | 8.8 | Jan 2 | WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-10892 | CC Cost Calculator Builder Stylemixthemes | 5.4 | Dec 18 | Cost Calculator Builder < 3.2.43 - Settings update via CSRF |
| CVE-2023-40011 | CC Cost Calculator Builder StylemixThemes | 5.4 | Dec 13 | WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability |
| CVE-2022-43472 | EZ eRoom – Zoom Meetings & Webinar StylemixThemes | 4.3 | Dec 13 | WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerability |
| CVE-2024-37269 | ME Masterstudy Elementor Widgets StylemixThemes | 5.3 | Nov 1 | WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability |
| CVE-2024-37094 | ML MasterStudy LMS StylemixThemes | 9.8 | Nov 1 | WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability |
| CVE-2024-47344 | UL Ulisting Stylemixthemes | 5.3 | Oct 7 | WordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerability |
| CVE-2024-8379 | CC Cost Calculator Builder Stylemixthemes | 7.2 | Sep 30 | Cost Calculator Builder < 3.2.29 - Admin+ SQL Injection |
| CVE-2024-43990 | ML Masterstudy LMS Starter StylemixThemes | 5.3 | Sep 25 | WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability |
| CVE-2024-6010 | CC Cost Calculator Builder PRO StylemixThemes | 5.3 | Sep 7 | Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price Manipulation |
| CVE-2024-43144 | CC Cost Calculator Builder StylemixThemes | 9.8 | Aug 29 | WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability |
| CVE-2024-5973 | ML Masterstudy Lms Stylemixthemes | 8.8 | Jul 22 | MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor |
| CVE-2024-37090 | CE Consulting Elementor Widgets StylemixThemes | 8.8 | Jul 9 | SQL Injection vulnerability in multiple StylemixThemes premium themes |
| CVE-2024-6012 | CC Cost Calculator Builder Stylemixthemes | 4.3 | Jul 2 | Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation |
| CVE-2024-6011 | CC Cost Calculator Builder Stylemixthemes | 4.8 | Jul 2 | Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2024-5545 | MC Motors - Car Dealer, Classifieds & Listing Stylemixthemes | 5.3 | Jul 2 | Motors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorization |
