stylemix

Top products

The 15 most recently published vulnerabilities affecting stylemix.

• CVE-2026-7753Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure6.5Aug 5, 2026
• CVE-2026-5060MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion6.5Jul 29, 2026
• CVE-2026-27391WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability5.4Jul 23, 2026
• CVE-2026-27392WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability4.3Jul 23, 2026
• CVE-2026-10865Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys5.3Jul 11, 2026
• CVE-2026-13114Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info7.2Jul 11, 2026
• CVE-2026-12435Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter4.3Jul 1, 2026
• CVE-2026-57330WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability6.5Jun 29, 2026
• CVE-2026-57640WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability4.3Jun 26, 2026
• CVE-2026-42730WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability8.5May 27, 2026
• CVE-2026-3892Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter8.1May 14, 2026
• CVE-2025-14755Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference5.3May 13, 2026
• CVE-2026-1934Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter4.3May 12, 2026
• CVE-2026-4817MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters6.5Apr 17, 2026
• CVE-2026-28078WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability4.9Mar 5, 2026