Log in Start free

StylemixThemes

Products

ProductCVEsExploitedLatest
Motors9–Oct 29, 2026
MasterStudy LMS Pro7–Jun 15, 2026
Cost Calculator Builder PRO6–Jul 29, 2026
uListing (WordPress plugin)6–Sep 27, 2021
Consulting Elementor Widgets6–Oct 31, 2025
MasterStudy LMS5–Oct 29, 2026
Masterstudy Elementor Widgets5–Oct 29, 2025
Motors – Car Dealer, Classifieds & Listing3–Nov 13, 2023
Cost Calculator Builder3–Oct 4, 2026
Motors - Car Dealer, Rental & Listing WordPress theme2–May 20, 2025
Pearl - Corporate Business2–Jul 2, 2026
Consulting2–Oct 31, 2025
eRoom – Zoom Meetings & Webinar (WordPress plugin)2–Apr 11, 2022
MasterStudy LMS WordPress Plugin – for Online Courses and Education2–Jun 22, 2023
Masterstudy2–Dec 18, 2025
WordPress Header Builder Plugin – Pearl1–May 25, 2023
Consulting - Business, Finance WordPress Theme1–Sep 15, 2026
eRoom – Zoom Meetings & Webinar1–Dec 13, 2024
GDPR Compliance & Cookie Consent1–May 25, 2023
Masterstudy LMS Starter1–Sep 25, 2024
MegaMenu1–Jun 10, 2024
Motors - Events1–Jun 6, 2025
Splash - Sport Club WordPress Theme for Basketball, Football, Hockey1–Jun 26, 2026
Booking Calendar | Appointment Booking | BookIt1–Dec 28, 2023

Exploited and recent CVEs

  • CVE-2026-118092 Medium 4.3 WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability 0.3%
  • CVE-2026-115964 Critical 9.3 WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability 0.3%
  • CVE-2026-93950 High 7.5 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability 0.2%
  • CVE-2026-105079 Medium 6.5 WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-104399 Medium 6.9 WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2026-97307 High 7.5 WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-14805 High 8.8 Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX 0.4%
  • CVE-2026-28145 Medium 5.3 WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability 0.2%
  • CVE-2026-14900 Critical 9.8 Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter 1.3%
  • CVE-2026-27433 Medium 6.5 WordPress Motors theme < 5.6.85 - Broken Access Control vulnerability 0.3%
  • CVE-2026-27412 High 8.1 WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-68063 High 7.5 WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability 0.4%
  • CVE-2026-54828 High 7.5 WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerability 0.3%
  • CVE-2026-54812 Critical 9.3 WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability 0.3%
  • CVE-2026-54814 High 8.1 WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-40766 High 8.5 WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability 0.3%
  • CVE-2026-39515 Medium 6.5 WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerability 0.4%
  • CVE-2025-64215 Medium 6.5 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability 0.2%
  • CVE-2026-8653 Medium 6.5 MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter 0.2%
  • CVE-2025-64374 Critical 9.9 WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-64214 High 7.5 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability 0.4%
  • CVE-2025-64213 High 7.5 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-64209 High 7.5 WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerability 0.3%
  • CVE-2025-64364 High 7.5 WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-64361 Medium 6.5 WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64360 High 7.5 WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-64359 High 7.5 WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-64212 Medium 5.4 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability 0.2%
  • CVE-2025-64211 Medium 5.3 WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability 0.2%
  • CVE-2025-64210 Medium 5.4 WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability 0.2%