Vulnerabilidades em stylemix

89 resultados
Análise Vexday

Stylemix acumula 43 vulnerabilidades cadastradas, das quais 11 são críticas, mas nenhuma está sob ataque ativo no momento. A fraqueza dominante (CWE-862 - controle de acesso inadequado) sugere problemas estruturais de autorização que demandam revisão arquitetural. Com 6 vulnerabilidades publicadas nos últimos 90 dias, o ritmo de descoberta permanece relevante e requer monitoramento contínuo.

CVE-2026-28078MEDIUMWordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2025-32170MEDIUMWordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-25150CRITICALWordPress uListing plugin <= 2.1.6 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-12435MEDIUMMotors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' ParameterEPSS 0.4%CVE-2026-5060MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment DeletionEPSS 0.4%CVE-2024-6012MEDIUMCost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content CreationEPSS 0.4%CVE-2024-3942MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing AuthorizationEPSS 0.4%CVE-2025-39587CRITICALWordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection VulnerabilityEPSS 0.4%CVE-2024-5468MEDIUMWordPress Header Builder Plugin – Pearl <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options DeletionEPSS 0.4%CVE-2025-31881MEDIUMWordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-47344MEDIUMWordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2025-14757MEDIUMCost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status BypassEPSS 0.4%CVE-2026-80069MEDIUMMasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajaxEPSS 0.4%CVE-2026-73404MEDIUMWordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-10970MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom TitleEPSS 0.3%CVE-2026-16750MEDIUMMotors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings ExposureEPSS 0.3%CVE-2024-5545MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing AuthorizationEPSS 0.3%CVE-2025-62049MEDIUMWordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-3437MEDIUMMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-upEPSS 0.3%CVE-2025-9243HIGHCost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status FunctionsEPSS 0.3%