Vulnerabilities in stylemix

80 results
Vexday analysis

Stylemix acumula 43 vulnerabilidades cadastradas, das quais 11 são críticas, mas nenhuma está sob ataque ativo no momento. A fraqueza dominante (CWE-862 - controle de acesso inadequado) sugere problemas estruturais de autorização que demandam revisão arquitetural. Com 6 vulnerabilidades publicadas nos últimos 90 dias, o ritmo de descoberta permanece relevante e requer monitoramento contínuo.

CVE-2024-5468MEDIUMWordPress Header Builder Plugin – Pearl <= 1.3.7 - Missing Authorization to Unauthenticated Arbitrary Site Options DeletionEPSS 0.4%CVE-2024-47344MEDIUMWordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2025-31881MEDIUMWordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-39587CRITICALWordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection VulnerabilityEPSS 0.4%CVE-2026-28078MEDIUMWordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2026-78284HIGHWordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerabilityEPSS 0.3%CVE-2026-7753MEDIUMCost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information DisclosureEPSS 0.3%CVE-2025-14757MEDIUMCost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status BypassEPSS 0.3%CVE-2024-5545MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing AuthorizationEPSS 0.3%CVE-2024-10970MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom TitleEPSS 0.3%CVE-2026-73404MEDIUMWordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-54691MEDIUMWordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityEPSS 0.3%CVE-2025-62049MEDIUMWordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-13737MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template CreationEPSS 0.3%CVE-2025-3437MEDIUMMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-upEPSS 0.3%CVE-2025-59575MEDIUMWordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-27391MEDIUMWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-9243HIGHCost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status FunctionsEPSS 0.3%CVE-2026-66693MEDIUMWordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-3892HIGHMotors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' ParameterEPSS 0.3%