Browse CVEs

MEDIUM 5.3 CVE-2025-14757 The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions up to, and including, 3.6.9 o… Cost Calculator Builder 3.6.10+ Fix from $1,6002026-01-16 MEDIUM 5.4 CVE-2025-2808 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Phone Number param… Motors Car Dealer\, Classifieds \& Listing 1.4.64+ Fix from $1,6002025-04-08 HIGH 8.8 CVE-2025-2807 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capabi… Motors Car Dealer\, Classifieds \& Listing 1.4.65+ Fix from $1,9502025-04-08 HIGH 8.8 CVE-2025-1653 The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2… Ulisting after 2.1.7 Fix from $1,9502025-03-15 HIGH 8.8 CVE-2025-1657 The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection d… Ulisting after 2.1.7 Fix from $1,9502025-03-15 MEDIUM 5.4 CVE-2024-10970 The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and inc… Motors Car Dealer\, Classifieds \& Listing 1.4.44+ Fix from $1,6002025-01-16 HIGH 8.8 CVE-2024-37093 Cross-Site Request Forgery (CSRF) vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forg… Masterstudy Lms 3.2.2+ Fix from $1,9502025-01-02 MEDIUM 5.4 CVE-2024-10892 The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged… Cost Calculator Builder 3.2.43+ Fix from $1,6002024-12-18 CRITICAL 9.8 CVE-2024-37094 Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This … Masterstudy Lms 3.2.13+ Fix from $2,3002024-11-01 HIGH 7.2 CVE-2024-8379 The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, lead… Cost Calculator Builder 3.2.29+ Fix from $1,9502024-09-30 MEDIUM 5.3 CVE-2024-6010 The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to … Cost Calculator Builder after 3.1.96 Fix from $1,6002024-09-07 CRITICAL 9.8 CVE-2024-43144 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Cost Calculator Builder allows S… Cost Calculator Builder 3.2.16+ Fix from $2,3002024-08-29 HIGH 8.8 CVE-2024-5973 The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used… Masterstudy Lms 3.3.24+ Fix from $1,9502024-07-22 HIGH 8.8 CVE-2024-37090 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Masterstudy Elementor Widgets, S… Consulting Elementor Widgets after 1.3.0 Fix from $1,9502024-07-09 MEDIUM 5.3 CVE-2024-5545 The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch… Motors Car Dealer\, Classifieds \& Listing 1.4.11+ Fix from $1,6002024-07-02 HIGH 8.8 CVE-2024-37092 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PH… Consulting Elementor Widgets 1.3.1+ Fix from $1,9502024-06-24 HIGH 8.8 CVE-2024-37091 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets, Sty… Consulting Elementor Widgets 1.3.1+ Fix from $1,9502024-06-24 CRITICAL 9.8 CVE-2024-37089 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PH… Consulting Elementor Widgets 1.3.1+ Fix from $2,3002024-06-24 CRITICAL 9.8 CVE-2024-35677 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusi… Mega Menu 2.3.13+ Fix from $2,3002024-06-10 MEDIUM 5.4 CVE-2024-3942 The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized access, modification, and … Masterstudy Lms 3.3.9+ Fix from $1,6002024-05-02 CRITICAL 9.8 CVE-2024-3136EPSS 5% The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'template' paramet… Masterstudy Lms 3.3.4+ Fix from $2,3002024-04-09 CRITICAL 9.8 CVE-2024-2409 The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to insufficie… Masterstudy Lms 3.3.2+ Fix from $2,3002024-03-29 CRITICAL 9.8 CVE-2024-2411 The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'modal' parameter.… Masterstudy Lms 3.3.1+ Fix from $2,3002024-03-29 HIGH 7.5 CVE-2024-2106 The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to,… Masterstudy Lms 3.2.11+ Fix from $1,9502024-03-13 CRITICAL 9.8 CVE-2024-1512EPSS 78% The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user… Masterstudy Lms after 3.2.5 Fix from $2,3002024-02-17 HIGH 7.2 CVE-2023-50852 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Booking Calendar | Appointment B… Bookit 2.4.4+ Fix from $1,9502023-12-28 HIGH 7.5 CVE-2023-46207 Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer,… Motors Car Dealer\, Classifieds \& Listing after 1.4.6 Fix from $1,9502023-11-13 MEDIUM 6.1 CVE-2023-46208 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin <= 1.4.6 versions. Motors Car Dealer\, Classifieds \& Listing after 1.4.6 Fix from $1,6002023-10-27 HIGH 7.5 CVE-2023-4278 The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to regis… Masterstudy Lms 3.0.18+ Fix from $1,9502023-09-11 CRITICAL 9.8 CVE-2023-2834 The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verificat… Bookit after 2.3.7 Fix from $2,3002023-06-30