Vulnerabilities > Stylemixthemes

DATE CVE VULNERABILITY TITLE RISK
2023-12-28 CVE-2023-50852 SQL Injection vulnerability in Stylemixthemes Bookit
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Booking Calendar | Appointment Booking | BookIt.This issue affects Booking Calendar | Appointment Booking | BookIt: from n/a through 2.4.3.
network
low complexity
stylemixthemes CWE-89
7.2
2023-11-13 CVE-2023-46207 Server-Side Request Forgery (SSRF) vulnerability in Stylemixthemes Motors - CAR Dealer, Classifieds & Listing
Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer, Classifieds & Listing: from n/a through 1.4.6.
network
low complexity
stylemixthemes CWE-918
7.5
2023-10-27 CVE-2023-46208 Cross-site Scripting vulnerability in Stylemixthemes Motors - CAR Dealer, Classifieds & Listing
Unauth.
network
low complexity
stylemixthemes CWE-79
6.1
2023-09-11 CVE-2023-4278 Unspecified vulnerability in Stylemixthemes Masterstudy LMS
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor.
network
low complexity
stylemixthemes
7.5
2023-06-30 CVE-2023-2834 Missing Authentication for Critical Function vulnerability in Stylemixthemes Bookit
The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7.
network
low complexity
stylemixthemes CWE-306
critical
9.8
2023-06-22 CVE-2023-35093 Missing Authorization vulnerability in Stylemixthemes Masterstudy LMS
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more.
network
low complexity
stylemixthemes CWE-862
6.5
2023-06-22 CVE-2023-35090 Cross-site Scripting vulnerability in Stylemixthemes Masterstudy LMS
Auth.
network
low complexity
stylemixthemes CWE-79
5.4
2023-06-07 CVE-2021-4339 Missing Authorization vulnerability in Stylemixthemes Ulisting
The uListing plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the "ulisting/includes/route.php" file on the /1/api/ulisting-user/search REST-API route in versions up to, and including, 1.6.6.
network
low complexity
stylemixthemes CWE-862
5.3
2023-06-07 CVE-2021-4340 SQL Injection vulnerability in Stylemixthemes Ulisting
The uListing plugin for WordPress is vulnerable to generic SQL Injection via the ‘listing_id’ parameter in versions up to, and including, 1.6.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
stylemixthemes CWE-89
7.5
2023-06-07 CVE-2021-4341 Missing Authorization vulnerability in Stylemixthemes Ulisting
The uListing plugin for WordPress is vulnerable to authorization bypass via Ajax due to missing capability checks, missing input validation, and a missing security nonce in the stm_update_email_data AJAX action in versions up to, and including, 1.6.6.
network
low complexity
stylemixthemes CWE-862
critical
9.8