Skip to content
OpenAdvisories
High · 8.5 CVE-2024-37090 EUVD-2024-36420GHSA-p38f-rq68-j3c6

SQL Injection vulnerability in multiple StylemixThemes premium themes

Published Jul 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Masterstudy Elementor Widgets, StylemixThemes Consulting Elementor Widgets.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2; Consulting Elementor Widgets: from n/a through 1.3.0.

Affected products

VendorProductAffectedFixed
StylemixThemes Masterstudy Elementor Widgets ≤ 1.2.2 —
StylemixThemes Consulting Elementor Widgets ≤ 1.3.0 —

References