Vendor

    Stylemix

    88 known vulnerabilities in products by Stylemix, 0 of them actively exploited (CISA KEV).

    Key figures

    88

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    14

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Stylemix
    CriticalCVE-2024-1512

    StylemixThemes MasterStudy LMS: SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2024-3136

    MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

    also in 1 other product

    		9.8
    CriticalCVE-2024-2411

    MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal

    also in 1 other product

    		9.8
    CriticalCVE-2021-4381

    uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route

    also in 1 other product

    		9.8
    CriticalCVE-2021-4343

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation

    also in 1 other product

    		9.8
    CriticalCVE-2021-4370

    uListing <= 1.6.6 - Missing Authorization

    also in 1 other product

    		9.8
    CriticalCVE-2021-4346

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes

    also in 1 other product

    		9.8
    CriticalCVE-2021-4340

    uListing <= 1.6.6 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2021-4341

    uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX

    also in 1 other product

    		9.8
    HighCVE-2026-78284

    WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability

    		8.6
    HighCVE-2025-2807

    Stylemix Motors: Missing Authorization

    also in 1 other product

    		8.8
    CriticalCVE-2024-2409

    MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

    also in 1 other product

    		9.8
    CriticalCVE-2021-4357

    uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion

    also in 1 other product

    		9.1
    CriticalCVE-2026-62031

    WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability

    		9.3
    HighCVE-2025-32654

    WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability

    		8.1
    HighCVE-2025-32142

    WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability

    		8.8
    HighCVE-2025-32141

    WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability

    		8.8
    HighCVE-2025-12529

    Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion

    		8.8
    HighCVE-2026-62033

    WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability

    		7.6
    HighCVE-2026-6806

    Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters

    		7.5
    HighCVE-2021-4339

    uListing <= 1.6.6 - Unauthenticated Information Disclosure

    also in 1 other product

    		7.5
    MediumCVE-2026-7753

    Stylemix Cost Calculator Builder: Missing Authorization

    		6.5
    HighCVE-2025-1653

    Stylemix Directory Listings WordPress plugin: Incorrect Privilege Assignment

    also in 1 other product

    		8.8
    HighCVE-2026-13114

    Stylemix Motors: Cross-site Scripting

    		7.2
    MediumCVE-2026-19802

    Stylemix Checkout Custom Fields Builder for WooCommerce: Missing Authorization

    		4.3

    All vulnerabilities in search

    Products

    Products by Stylemix
    Masterstudy Lms140
    Motors – Car Dealership & Classified Listings Plugin140
    Cost Calculator Builder130
    Directory Listings Wordpress Plugin – Ulisting120
    Masterstudy Lms Wordpress Plugin – For Online Courses And Education110
    Stylemix uListing110
    Stylemix Motors50
    Pearl – Header Builder30