Vulnerabilidades en Stylemix

77 resultados
Análisis Vexday

Stylemix possui 29 vulnerabilidades catalogadas, com 2 classificadas como críticas, mas nenhuma sob ataque ativo conhecido até o momento. A fraqueza dominante (CWE-862 - falha de autorização) sugere problemas de controle de acesso, que demandam atenção prioritária; apenas 3 CVEs foram publicadas nos últimos 90 dias, indicando que o risco atual não está em escalada acelerada.

CVE-2026-7753MEDIUMCost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information DisclosureEPSS 0.4%CVE-2025-39587CRITICALWordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection VulnerabilityEPSS 0.4%CVE-2026-28078MEDIUMWordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2025-31881MEDIUMWordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-14757MEDIUMCost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status BypassEPSS 0.3%CVE-2024-5545MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing AuthorizationEPSS 0.3%CVE-2024-10970MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom TitleEPSS 0.3%CVE-2025-54691MEDIUMWordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityEPSS 0.3%CVE-2025-62049MEDIUMWordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-3437MEDIUMMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-upEPSS 0.3%CVE-2025-59575MEDIUMWordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-9243HIGHCost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status FunctionsEPSS 0.3%CVE-2024-13737MEDIUMMotors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template CreationEPSS 0.3%CVE-2026-66693MEDIUMWordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-27391MEDIUMWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-3892HIGHMotors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' ParameterEPSS 0.3%CVE-2026-42730HIGHWordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-64366HIGHWordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-13114HIGHMotors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical InfoEPSS 0.2%CVE-2026-57640MEDIUMWordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerabilityEPSS 0.2%