Vulnerabilidades en stylemix
92 resultadosCVE-2025-2128MEDIUMCost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids ParameterEPSS 0.4%CVE-2026-28078MEDIUMWordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2025-32170MEDIUMWordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-25150CRITICALWordPress uListing plugin <= 2.1.6 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-12435MEDIUMMotors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' ParameterEPSS 0.4%CVE-2026-5060MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment DeletionEPSS 0.4%CVE-2024-6012MEDIUMCost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content CreationEPSS 0.4%CVE-2024-3942MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing AuthorizationEPSS 0.4%CVE-2025-39587CRITICALWordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection VulnerabilityEPSS 0.4%CVE-2024-5468MEDIUMWordPress Header Builder Plugin – Pearl <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options DeletionEPSS 0.4%CVE-2025-31881MEDIUMWordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-47344MEDIUMWordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2025-14757MEDIUMCost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status BypassEPSS 0.4%CVE-2026-80069MEDIUMMasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajaxEPSS 0.4%CVE-2026-73404MEDIUMWordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-54691MEDIUMWordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityEPSS 0.3%CVE-2024-10970MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom TitleEPSS 0.3%CVE-2026-16750MEDIUMMotors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings ExposureEPSS 0.3%CVE-2024-5545MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing AuthorizationEPSS 0.3%CVE-2025-62049MEDIUMWordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerabilityEPSS 0.3%