#StyleMix
🚨 EUVD-2025-209816
📊 5.3/10
🏢 stylemix

📝 The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference (IDOR) in all...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209816

#cybersecurity #infosec #cve #euvd
October 1, 2026 at 1:01 AM
🚨 EUVD-2026-89669
📊 7.5/10
🏢 stylemix

📝 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' p...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-89669

#cybersecurity #infosec #cve #euvd
September 30, 2026 at 9:02 AM
Stylemix holds a D trust score: 29 CVEs, max CVSS 9.3, and 100% of them unpatched. SQL injection and broken access control lead the list. If you run their WordPress themes, audit now. https://www.valtersit.com/vendors/stylemix/ #cybersecurity #infosec #WordPress
Stylemix
www.valtersit.com
September 28, 2026 at 12:00 PM
🚨 EUVD-2026-53033
📊 6.5/10
🏢 stylemix

📝 The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the `cost-ca...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-53033

#cybersecurity #infosec #cve #euvd
August 5, 2026 at 6:01 AM
🚨 EUVD-2026-50271
📊 6.5/10
🏢 stylemix

📝 The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ver...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-50271

#cybersecurity #infosec #cve #euvd
July 29, 2026 at 11:01 AM
🚨 EUVD-2026-48155
📊 5.4/10
🏢 stylemix

📝 Subscriber Broken Access Control in uListing <= 2.2.0 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48155

#cybersecurity #infosec #cve #euvd
July 23, 2026 at 3:01 PM
🚨 EUVD-2026-48156
📊 4.3/10
🏢 stylemix

📝 Contributor Broken Access Control in uListing <= 2.2.0 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48156

#cybersecurity #infosec #cve #euvd
July 23, 2026 at 3:01 PM
🚨 EUVD-2026-43152
📊 5.3/10
🏢 stylemix

📝 The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.11 via the (te...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43152

#cybersecurity #infosec #cve #euvd
July 11, 2026 at 7:00 AM
🚨 EUVD-2026-43130
📊 7.2/10
🏢 stylemix

📝 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content and User B...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43130

#cybersecurity #infosec #cve #euvd
July 11, 2026 at 5:01 AM
🚨 EUVD-2026-40935
📊 4.3/10
🏢 stylemix

📝 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40935

#cybersecurity #infosec #cve #euvd
July 1, 2026 at 9:00 AM
🚨 EUVD-2026-40101
📊 6.5/10
🏢 stylemix

📝 Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40101

#cybersecurity #infosec #cve #euvd
June 29, 2026 at 4:00 PM
🚨 EUVD-2026-39755
📊 4.3/10
🏢 stylemix

📝 Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39755

#cybersecurity #infosec #cve #euvd
June 26, 2026 at 4:00 PM
🚨 EUVD-2026-32185
📊 8.5/10
🏢 stylemix

📝 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-m...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32185

#cybersecurity #infosec #cve #euvd
May 27, 2026 at 12:00 PM
CVE-2026-42730 - WordPress MasterStudy LMS plugin
CVE ID : CVE-2026-42730

Published : 27 May 2026, 9:49 a.m. | 1 hour, 20 minutes ago

Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy ...
CVE-2026-42730 - WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through
cvefeed.io
May 27, 2026 at 11:38 AM
Links unten eher TU, but UdK taking notes. Naja, Campus Charlottenburg stylemix.
April 23, 2026 at 7:58 AM
🚨 EUVD-2026-23338
📊 6.5/10
🏢 stylemix

📝 The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to Time-based Blind SQL Injection via the 'order...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23338

#cybersecurity #infosec #cve #euvd
April 17, 2026 at 3:01 AM
🚨 EUVD-2026-9736
📊 n/a
🏢 stylemix

📝 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing ulisting allows Path Traversal.This issue af...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9736

#cybersecurity #infosec #cve #euvd
March 5, 2026 at 7:13 AM
🚨 EUVD-2026-8847
📊 n/a
🏢 stylemix

📝 Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-8847

#cybersecurity #infosec #cve #euvd
February 26, 2026 at 10:02 AM
CVE-2026-28138 - WordPress uListing plugin
CVE ID : CVE-2026-28138

Published : Feb. 26, 2026, 8:33 a.m. | 36 minutes ago

Description : Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from ...
CVE-2026-28138 - WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through
cvefeed.io
February 26, 2026 at 9:33 AM
Heads up: HIGH severity vuln in stylemix Cost Calculator Builder for WordPress (all versions). Attackers can trigger file deletion via admin actions — risk of RCE. Audit & restrict admin access. https://radar.offseq.com/threat/cve-2025-12529-cwe-73-external-control-of-file-nam-e14e9285 #OffSeq #W...
December 2, 2025 at 4:34 AM
CVE-2025-64366 - WordPress MasterStudy LMS plugin
CVE ID : CVE-2025-64366

Published : Oct. 31, 2025, 12:15 p.m. | 1 hour, 11 minutes ago

Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStu...
CVE-2025-64366 - WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through
cvefeed.io
October 31, 2025 at 2:21 PM
You can now share your thoughts on vulnerability CVE-2025-10494 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-10494

stylemix - Motors – Car Dealership & Classified Listings Plugin

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-10494
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
October 8, 2025 at 4:26 AM
You can now share your thoughts on vulnerability CVE-2025-9243 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-9243

stylemix - Cost Calculator Builder

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-9243
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
October 4, 2025 at 2:40 AM
Hab so diese Schuhe und frag mich die ganze Zeit inwiefern ich die so fühle und tu ich eigentlich schon aber hab echt Schwierigkeiten Outfits damit zu kombinieren
September 28, 2025 at 9:20 PM