Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

StylemixThemes — Vulnerabilities & Security Advisories 69

Browse all 69 CVE security advisories affecting StylemixThemes. AI-powered Chinese analysis, POCs, and references for each vulnerability.

StylemixThemes operates as a prominent developer of WordPress themes and plugins, primarily targeting the e-commerce and lifestyle sectors through its extensive portfolio on marketplaces like ThemeForest. The company’s software has been associated with fifty recorded Common Vulnerabilities and Exposures (CVEs), reflecting significant security challenges in its codebase. Historically, these vulnerabilities frequently manifest as remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and improper access controls within plugin architectures. While no single catastrophic data breach has been publicly attributed solely to StylemixThemes, the high volume of CVEs indicates systemic issues in their development and patching processes. Users are advised to exercise caution, ensuring all components are updated to mitigate risks associated with these known exploitation vectors.

CVE ID Title CVSS Severity Published
CVE-2026-118092 WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability — MasterStudy LMS CWE-862 4.3 Medium 2026-10-29
CVE-2026-115964 WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability — Motors CWE-89 9.3 Critical 2026-10-29
CVE-2026-93950 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability — Motors CWE-862 7.5 High 2026-10-10
CVE-2026-105079 WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability — MasterStudy LMS CWE-79 6.5 Medium 2026-10-08
CVE-2026-104399 WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability — Motors CWE-201 6.9 Medium 2026-10-06
CVE-2026-97307 WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability — Cost Calculator Builder CWE-201 7.5 High 2026-10-04
CVE-2026-14805 Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX — Consulting - Business, Finance WordPress Theme CWE-269 8.8 High 2026-09-15
CVE-2026-28145 WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability — MasterStudy LMS CWE-345 5.3 Medium 2026-07-31
CVE-2026-14900 Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter — Cost Calculator Builder PRO CWE-94 9.8 Critical 2026-07-29
CVE-2026-27433 WordPress Motors theme < 5.6.85 - Broken Access Control vulnerability — Motors CWE-862 6.5 Medium 2026-07-02
CVE-2026-27412 WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability — Pearl - Corporate Business CWE-98 8.1 High 2026-07-02
CVE-2025-68063 WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability — Splash - Sport Club WordPress Theme for Basketball, Football, Hockey CWE-98 7.5 High 2026-06-26
CVE-2026-54828 WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerability — Motors CWE-862 7.5 High 2026-06-25
CVE-2026-54812 WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability — Motors CWE-89 9.3 Critical 2026-06-17
CVE-2026-54814 WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability — Motors CWE-98 8.1 High 2026-06-17
CVE-2026-40766 WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability — MasterStudy LMS CWE-89 8.5 High 2026-06-15
CVE-2026-39515 WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerability — Motors CWE-862 6.5 Medium 2026-06-15
CVE-2025-64215 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability — MasterStudy LMS Pro CWE-862 6.5 Medium 2026-06-15
CVE-2026-8653 MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter — MasterStudy LMS Pro CWE-89 6.5 Medium 2026-06-04
CVE-2025-64374 WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability — Motors CWE-434 9.9 Critical 2025-12-18
CVE-2025-64214 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability — MasterStudy LMS Pro CWE-862 7.5 High 2025-12-18
CVE-2025-64209 WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerability — Masterstudy CWE-862 7.5 High 2025-12-18
CVE-2025-64213 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability — MasterStudy LMS Pro CWE-201 7.5 High 2025-12-18
CVE-2025-64364 WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability — Masterstudy CWE-98 7.5 High 2025-10-31
CVE-2025-64361 WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability — Consulting Elementor Widgets CWE-79 6.5 Medium 2025-10-31
CVE-2025-64359 WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability — Consulting CWE-98 7.5 High 2025-10-31
CVE-2025-64360 WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability — Consulting Elementor Widgets CWE-98 7.5 High 2025-10-31
CVE-2025-64212 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability — MasterStudy LMS Pro CWE-862 5.4 Medium 2025-10-29
CVE-2025-64210 WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability — Masterstudy Elementor Widgets CWE-862 5.4 Medium 2025-10-29
CVE-2025-64211 WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability — Masterstudy Elementor Widgets CWE-862 5.3 Medium 2025-10-29

This page lists every published CVE security advisory associated with StylemixThemes. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.