Vulnerabilidades en stylemix

80 resultados
Análisis Vexday

Stylemix acumula 43 vulnerabilidades cadastradas, das quais 11 são críticas, mas nenhuma está sob ataque ativo no momento. A fraqueza dominante (CWE-862 - controle de acesso inadequado) sugere problemas estruturais de autorização que demandam revisão arquitetural. Com 6 vulnerabilidades publicadas nos últimos 90 dias, o ritmo de descoberta permanece relevante e requer monitoramento contínuo.

CVE-2026-42730HIGHWordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-64366HIGHWordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-57640MEDIUMWordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-27392MEDIUMWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-68568MEDIUMWordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2025-14755MEDIUMCost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object ReferenceEPSS 0.2%CVE-2026-57330MEDIUMWordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54744MEDIUMWordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-59576MEDIUMWordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-1934MEDIUMMotors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' ParameterEPSS 0.2%CVE-2025-2808MEDIUMMotors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-48277MEDIUMWordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-5060MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment DeletionEPSS 0.2%CVE-2024-37093MEDIUMWordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-59577MEDIUMWordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition VulnerabilityEPSS 0.2%CVE-2025-31414MEDIUMWordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-0559MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' ShortcodeEPSS 0.2%CVE-2025-31880MEDIUMWordPress Pearl plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-12206MEDIUMWordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header DeletionEPSS 0.2%CVE-2025-13766MEDIUMMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and DeletionEPSS 0.2%