StylemixThemes Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

masterstudy_lms8 vulnerabilities
MasterStudy LMS Pro7 vulnerabilities
Consulting Elementor Widgets6 vulnerabilities
Cost Calculator Builder PRO6 vulnerabilities
Motors6 vulnerabilities
uListing (WordPress plugin)6 vulnerabilities
Masterstudy Elementor Widgets5 vulnerabilities
consulting_elementor_widgets3 vulnerabilities
MasterStudy LMS3 vulnerabilities
Motors – Car Dealer, Classifieds & Listing3 vulnerabilities
Consulting2 vulnerabilities
Cost Calculator Builder2 vulnerabilities
cost_calculator_builder2 vulnerabilities
cost_calculator_builder_pro2 vulnerabilities
eRoom – Zoom Meetings & Webinar (WordPress plugin)2 vulnerabilities
Masterstudy2 vulnerabilities
MasterStudy LMS WordPress Plugin – for Online Courses and Education2 vulnerabilities
masterstudy_elementor_widgets2 vulnerabilities
Motors - Car Dealer, Rental & Listing WordPress theme2 vulnerabilities
Pearl - Corporate Business2 vulnerabilities
Booking Calendar | Appointment Booking | BookIt1 vulnerability
eRoom – Zoom Meetings & Webinar1 vulnerability
GDPR Compliance & Cookie Consent1 vulnerability
Masterstudy LMS Starter1 vulnerability
MegaMenu1 vulnerability

StylemixThemes vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-27412HIGH	WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability Unauthenticated Local File Inclusion in Pearl - Corporate Business <= 3.4.10 versions. CWE-98Jul 2, 2026	CVSS8.1v3.1	EPSS0.274%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-26986HIGH	WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Pearl - Corporate Business pearl allows PHP Local File Inclusion.This issue affects Pearl - Corporate Business: from n/a through < 3.4.8. CWE-98Mar 26, 2025	CVSS8.1v3.1	EPSS0.981%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX