Vulnerabilidades en stylemix
92 resultadosCVE-2025-32122HIGHWordPress uListing plugin <= 2.2.0 - SQL Injection vulnerabilityEPSS 0.6%CVE-2025-12529HIGHCost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File DeletionEPSS 0.6%CVE-2026-80067MEDIUMMasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step ParameterEPSS 0.6%CVE-2026-10865MEDIUMCost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret KeysEPSS 0.6%CVE-2026-78284HIGHWordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerabilityEPSS 0.5%CVE-2025-1653HIGHDirectory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege EscalationEPSS 0.5%CVE-2025-10494HIGHMotors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.5%CVE-2026-7753MEDIUMCost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information DisclosureEPSS 0.5%CVE-2024-4000MEDIUMWordPress Header Builder Plugin – Pearl <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.5%CVE-2026-116617HIGHMotors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' ParameterEPSS 0.5%CVE-2025-32662HIGHWordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerabilityEPSS 0.5%CVE-2024-1904MEDIUMMasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_postsEPSS 0.5%CVE-2026-4817MEDIUMMasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' ParametersEPSS 0.5%CVE-2025-25151HIGHWordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerabilityEPSS 0.5%CVE-2026-118090HIGHWordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-28138HIGHWordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-32237MEDIUMWordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-6011MEDIUMCost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2025-1657HIGHDirectory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object InjectionEPSS 0.4%CVE-2026-13114HIGHMotors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical InfoEPSS 0.4%