StylemixThemes Vulnerabilities and Affected Products
Vulnerabilities associated with Motors – Car Dealer, Classifieds & Listing.
Products
Clear product- masterstudy_lms8 vulnerabilities
- MasterStudy LMS Pro7 vulnerabilities
- Consulting Elementor Widgets6 vulnerabilities
- Cost Calculator Builder PRO6 vulnerabilities
- Motors6 vulnerabilities
- uListing (WordPress plugin)6 vulnerabilities
- Masterstudy Elementor Widgets5 vulnerabilities
- consulting_elementor_widgets3 vulnerabilities
- MasterStudy LMS3 vulnerabilities
- Motors – Car Dealer, Classifieds & Listing3 vulnerabilities
- Consulting2 vulnerabilities
- Cost Calculator Builder2 vulnerabilities
- cost_calculator_builder2 vulnerabilities
- cost_calculator_builder_pro2 vulnerabilities
- eRoom – Zoom Meetings & Webinar (WordPress plugin)2 vulnerabilities
- Masterstudy2 vulnerabilities
- MasterStudy LMS WordPress Plugin – for Online Courses and Education2 vulnerabilities
- masterstudy_elementor_widgets2 vulnerabilities
- Motors - Car Dealer, Rental & Listing WordPress theme2 vulnerabilities
- Pearl - Corporate Business2 vulnerabilities
- Booking Calendar | Appointment Booking | BookIt1 vulnerability
- eRoom – Zoom Meetings & Webinar1 vulnerability
- GDPR Compliance & Cookie Consent1 vulnerability
- Masterstudy LMS Starter1 vulnerability
- MegaMenu1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-46207MEDIUM | WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer, Classifieds & Listing: from n/a through 1.4.6. CWE-918Nov 13, 2023 | CVSS4.1v3.1 | EPSS0.506% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-46208HIGH | WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin <= 1.4.6 versions. CWE-79Oct 27, 2023 | CVSS7.1v3.1 | EPSS0.331% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-38716MEDIUM | WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin <= 1.4.4 versions. CWE-352May 25, 2023 | CVSS5.4v3.1 | EPSS0.248% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |