Vendor
stylemix
92 known vulnerabilities.
Products
Motors – Car Dealership & Classified Listings Plugin 17
MasterStudy LMS 15
Cost Calculator Builder 13
Directory Listings WordPress plugin – uListing 12
uListing 11
MasterStudy LMS WordPress Plugin – for Online Courses and Education 11
Motors 5
Pearl – Header Builder 3
MasterStudy LMS WordPress Plugin 2
Pearl 2
Checkout Custom Fields Builder for WooCommerce 1
2 results · Clear filters · Feed
-
High 8.8CVE-2025-2807 Public exploit
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check in the mvl_setup_wizard_install_plugin() function in all versions up to, and including, 1.4.64. Thi…
-
Critical 9.8
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insu…