Vulnerabilidades em Stylemix
92 resultadosAnálise Vexday
Stylemix possui 29 vulnerabilidades catalogadas, com 2 classificadas como críticas, mas nenhuma sob ataque ativo conhecido até o momento. A fraqueza dominante (CWE-862 - falha de autorização) sugere problemas de controle de acesso, que demandam atenção prioritária; apenas 3 CVEs foram publicadas nos últimos 90 dias, indicando que o risco atual não está em escalada acelerada.
CVE-2025-3437MEDIUMMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-upEPSS 0.3%CVE-2025-9243HIGHCost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status FunctionsEPSS 0.3%CVE-2024-13737MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template CreationEPSS 0.3%CVE-2025-59575MEDIUMWordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-66693MEDIUMWordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-62033HIGHWordPress uListing plugin <= 2.2.0 - Settings Change vulnerabilityEPSS 0.3%CVE-2026-27391MEDIUMWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-62031CRITICALWordPress uListing plugin <= 2.2.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-64366HIGHWordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-6806HIGHMotors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' ParametersEPSS 0.3%CVE-2026-3892HIGHMotors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' ParameterEPSS 0.3%CVE-2026-42730HIGHWordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-68568MEDIUMWordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-57640MEDIUMWordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-27392MEDIUMWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-2808MEDIUMMotors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-0559MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' ShortcodeEPSS 0.2%CVE-2025-14755MEDIUMCost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object ReferenceEPSS 0.2%CVE-2025-54744MEDIUMWordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-59576MEDIUMWordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control VulnerabilityEPSS 0.2%