İçeriğe atla
Noroxi

StylemixThemes kayıtları

stylemixthemes üreticisine ait 66 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,5
Pre-auth RCE
2
Düzeltme kaydı olan
%37,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

66 kayıt
  • CVE-2022-0441
    65Bu hafta

    MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    stylemixthemes · masterstudy lms7 Mar 2022

  • CVE-2024-1512
    62Bu hafta

    MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %77

    stylemixthemes · masterstudy lms17 Şub 2024

  • CVE-2024-3136
    41Planlayın

    MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    stylemixthemes · masterstudy lms9 Nis 2024

  • CVE-2021-36879
    40Planlayın

    WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %2

    stylemixthemes · ulisting27 Eyl 2021

  • CVE-2021-36880
    40Planlayın

    WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability

    KritikCVSS 9,8İstismar yokEPSS %2

    stylemixthemes · ulisting27 Eyl 2021

  • CVE-2024-43144
    40Planlayın

    WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    stylemixthemes · cost calculator builder29 Ağu 2024

  • CVE-2023-2834
    40Planlayın

    BookIt <= 2.3.7 - Authentication Bypass

    KritikCVSS 9,8İstismar yokEPSS %1

    stylemixthemes · bookit29 Haz 2023

  • CVE-2024-2411
    39İzleyin

    MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal

    KritikCVSS 9,8İstismar yokEPSS %1

    stylemixthemes · masterstudy lms29 Mar 2024

  • CVE-2021-4343
    39İzleyin

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation

    KritikCVSS 9,8İstismar yokEPSS %1

    stylemixthemes · ulisting6 Haz 2023

  • CVE-2021-4381
    39İzleyin

    uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route

    KritikCVSS 9,8İstismar yokEPSS %1

    stylemixthemes · ulisting6 Haz 2023

  • CVE-2021-4370
    39İzleyin

    uListing <= 1.6.6 - Missing Authorization

    KritikCVSS 9,8İstismar yokEPSS %1

    stylemixthemes · ulisting6 Haz 2023

  • CVE-2021-4341
    39İzleyin

    uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX

    KritikCVSS 9,8İstismar yokEPSS %1

    stylemixthemes · ulisting6 Haz 2023

  • CVE-2024-2409
    39İzleyin

    MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

    KritikCVSS 9,8İstismar yokEPSS %0

    stylemixthemes · masterstudy lms29 Mar 2024

  • CVE-2024-37089
    39İzleyin

    WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    stylemixthemes · consulting elementor widgets24 Haz 2024

  • CVE-2024-35677
    39İzleyin

    WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    stylemixthemes · mega menu10 Haz 2024

  • CVE-2024-37094
    39İzleyin

    WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    stylemixthemes · masterstudy lms1 Kas 2024

  • CVE-2024-37091
    35İzleyin

    WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    stylemixthemes · consulting elementor widgets24 Haz 2024

  • CVE-2022-3989
    35İzleyin

    Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %1

    stylemixthemes · motors - car dealer\, classifieds \& listing12 Ara 2022

  • CVE-2021-36874
    35İzleyin

    WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    stylemixthemes · ulisting27 Eyl 2021

  • CVE-2025-2807
    35İzleyin

    Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    stylemixthemes · motors - car dealer\, classifieds \& listing8 Nis 2025

  • CVE-2024-37090
    35İzleyin

    SQL Injection vulnerability in multiple StylemixThemes premium themes

    YüksekCVSS 8,8İstismar yokEPSS %0

    stylemixthemes · consulting elementor widgets9 Tem 2024

  • CVE-2025-1653
    35İzleyin

    Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    stylemixthemes · ulisting14 Mar 2025

  • CVE-2024-37092
    35İzleyin

    WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    stylemixthemes · consulting elementor widgets24 Haz 2024

  • CVE-2024-5973
    35İzleyin

    MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor

    YüksekCVSS 8,8İstismar yokEPSS %0

    stylemixthemes · masterstudy lms22 Tem 2024

  • CVE-2021-36876
    35İzleyin

    WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    stylemixthemes · ulisting27 Eyl 2021