Read the docs

StylemixThemes

Records173All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high60CVSS 7.0–8.9

Exploited now

StylemixThemes records in CISA KEV

No StylemixThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ulisting 18 records MEDIUM Masterstudy Lms 14 records CRITICAL Motors - Car Dealer, Classifieds & Listing 12 records HIGH Cost Calculator Builder 7 records HIGH Consulting Elementor Widgets 4 records HIGH Bookit 2 records HIGH Eroom - Zoom Meetings & Webinar 2 records LOW Gdpr Compliance & Cookie Consent 1 record LOW

Records

7 records in Cost Calculator Builder · all components

TI-2024-07769 CVE-2024-8379 · GHSA-xgc6-jf52-wphf

Cost Calculator Builder < 3.2.29 - Admin+ SQL Injection

Priority HIGH 67

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00548 Published 2024-09-30 Fixed in 3.2.29 CWE-89
TI-2024-10096 CVE-2024-10892 · GHSA-p528-6gx5-qw3c

Cost Calculator Builder < 3.2.43 - Settings update via CSRF

Priority MEDIUM 58

The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00187 Published 2024-12-18 Fixed in 3.2.43 CWE-352
TI-2024-28815 CVE-2024-43144 · GHSA-3g5c-7828-xwcq

WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Cost Calculator Builder allows SQL Injection.This issue affects Cost Calculator Builder: from n/a throu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01985 Published 2024-08-29 No fix listed CWE-89
TI-2024-05569 CVE-2024-6011 · GHSA-9w9h-r583-fwjr

Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 22

The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textarea.description’ parameter in all versions up to, and including, 3.2.12 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00436 Published 2024-07-02 No fix listed CWE-79
TI-2024-05570 CVE-2024-6012 · GHSA-2m9p-pg55-8rm3

Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation

Priority LOW 20

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'embed-create-page' and 'embed-insert-pages' functions in all versions up to, a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00385 Published 2024-07-02 No fix listed CWE-862
Open these records in search →