Skip to content
OpenAdvisories

Vendor

StylemixThemes

73 known vulnerabilities.

Products

Motors 12 MasterStudy LMS Pro 7 uListing (WordPress plugin) 6 Cost Calculator Builder PRO 6 Consulting Elementor Widgets 6 MasterStudy LMS 6 Masterstudy Elementor Widgets 5 Motors – Car Dealer, Classifieds & Listing 3 Cost Calculator Builder 3 Consulting 2 MasterStudy LMS WordPress Plugin – for Online Courses and Education 2 Masterstudy 2 Motors - Car Dealer, Rental & Listing WordPress theme 2 eRoom – Zoom Meetings & Webinar (WordPress plugin) 2 Pearl - Corporate Business 2 GDPR Compliance & Cookie Consent 1 eRoom – Zoom Meetings & Webinar 1 Splash - Sport Club WordPress Theme for Basketball, Football, Hockey 1 WordPress Header Builder Plugin – Pearl 1 Booking Calendar | Appointment Booking | BookIt 1 Masterstudy LMS Starter 1 Consulting - Business, Finance WordPress Theme 1 MegaMenu 1 Motors - Events 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-14900 Public exploit

    Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter

    The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the js_to_php function. This is due to insufficient sanitization of the orderDetails[*].originalValue field, which is i…

    StylemixThemes Cost Calculator Builder PRO Web / CMS
  • Critical 9.8
    CVE-2025-4322 Public exploit Scanner template EPSS 15%

    Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

    The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible…

    StylemixThemes Motors - Car Dealer, Rental & Listing WordPress theme Web / CMS