StylemixThemes Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

masterstudy_lms8 vulnerabilities
MasterStudy LMS Pro7 vulnerabilities
Consulting Elementor Widgets6 vulnerabilities
Cost Calculator Builder PRO6 vulnerabilities
Motors6 vulnerabilities
uListing (WordPress plugin)6 vulnerabilities
Masterstudy Elementor Widgets5 vulnerabilities
consulting_elementor_widgets3 vulnerabilities
MasterStudy LMS3 vulnerabilities
Motors – Car Dealer, Classifieds & Listing3 vulnerabilities
Consulting2 vulnerabilities
Cost Calculator Builder2 vulnerabilities
cost_calculator_builder2 vulnerabilities
cost_calculator_builder_pro2 vulnerabilities
eRoom – Zoom Meetings & Webinar (WordPress plugin)2 vulnerabilities
Masterstudy2 vulnerabilities
MasterStudy LMS WordPress Plugin – for Online Courses and Education2 vulnerabilities
masterstudy_elementor_widgets2 vulnerabilities
Motors - Car Dealer, Rental & Listing WordPress theme2 vulnerabilities
Pearl - Corporate Business2 vulnerabilities
Booking Calendar | Appointment Booking | BookIt1 vulnerability
eRoom – Zoom Meetings & Webinar1 vulnerability
GDPR Compliance & Cookie Consent1 vulnerability
Masterstudy LMS Starter1 vulnerability
MegaMenu1 vulnerability

StylemixThemes vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2022-25614MEDIUM	WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerability Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows an attacker to Sync with Zoom Meetings. CWE-352Apr 11, 2022	CVSS4.3v3.1	EPSS0.442%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2022-25615MEDIUM	WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletion Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows cache deletion. CWE-352Apr 11, 2022	CVSS4.3v3.1	EPSS0.442%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX