Read the docs

StylemixThemes

Records173All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high60CVSS 7.0–8.9

Exploited now

StylemixThemes records in CISA KEV

No StylemixThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ulisting 18 records MEDIUM Masterstudy Lms 14 records CRITICAL Motors - Car Dealer, Classifieds & Listing 12 records HIGH Cost Calculator Builder 7 records HIGH Consulting Elementor Widgets 4 records HIGH Bookit 2 records HIGH Eroom - Zoom Meetings & Webinar 2 records LOW Gdpr Compliance & Cookie Consent 1 record LOW

Records

4 records in Consulting Elementor Widgets · all components

TI-2024-24620 CVE-2024-37091 · GHSA-9cp8-pr92-vg9q

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

Priority HIGH 82

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.T…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01243 Published 2024-06-24 No fix listed CWE-77
TI-2024-24618 CVE-2024-37089 · GHSA-c99m-hj8j-vpx5

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability

Priority HIGH 76

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets:…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00609 Published 2024-06-24 No fix listed CWE-22
TI-2024-24621 CVE-2024-37092 · GHSA-q9g9-936x-ff5x

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets:…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00525 Published 2024-06-24 No fix listed CWE-22
TI-2024-24619 CVE-2024-37090 · GHSA-p38f-rq68-j3c6

SQL Injection vulnerability in multiple StylemixThemes premium themes

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Masterstudy Elementor Widgets, StylemixThemes Consulting Elementor Widgets.This issue affects Masterstu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0053 Published 2024-07-09 No fix listed CWE-89
Open these records in search →