Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
•added 2025/12/19 7:32 a.m.•15 views

CVE-2025-64209

Missing Authorization vulnerability in StylemixThemes Masterstudy masterstudy allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masterstudy: from n/a through 4.8.122...

7.5CVSS7AI score0.00341EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/18 9:30 a.m.•15 views

EUVD-2025-204081

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS Pro: from n/a through 4.7.16...

7.5CVSS6.4AI score0.00359EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/18 8:16 a.m.•11 views

CVE-2025-64209

Missing Authorization vulnerability in StylemixThemes Masterstudy masterstudy allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masterstudy: from n/a through 4.8.122...

7.5CVSS0.00341EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•3 views

CVE-2025-64209: Missing Authorization

Missing Authorization vulnerability in StylemixThemes Masterstudy masterstudy allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masterstudy: from n/a through 4.8.122...

7.5CVSS5.8AI score0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•12 views

PT-2025-52165

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MasterStudy LMS Pro: from n/a through 4.7.16...

7AI score0.00356EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•12 views

WordPress plugin StylemixThemes Masterstudy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.6AI score0.00341EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/31 12:30 p.m.•37 views

EUVD-2025-37329

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Masterstudy masterstudy allows PHP Local File Inclusion.This issue affects Masterstudy: from n/a through 4.8.126...

6.6AI score0.0039EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•1 views

CVE-2025-64364: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Masterstudy masterstudy allows PHP Local File Inclusion.This issue affects Masterstudy: from n/a through 4.8.126...

7.5CVSS5.8AI score0.0039EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/30 9:16 a.m.•15 views

CVE-2025-64212

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS Pro: from n/a through 4.7.16...

5.4CVSS6.9AI score0.00216EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/29 9:30 a.m.•15 views

EUVD-2025-36621

Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through = 1.2.4...

5.4CVSS6.5AI score0.00175EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/29 9:30 a.m.•14 views

EUVD-2025-36619

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS Pro: from n/a through 4.7.16...

5.4CVSS6.5AI score0.00216EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•17 views

PT-2025-44251

Name of the Vulnerable Software and Affected Versions StylemixThemes Masterstudy Elementor Widgets versions through 1.2.4 Description A missing authorization issue exists in StylemixThemes Masterstudy Elementor Widgets, allowing access to functionality that is not properly restricted by Access...

5.3CVSS6.6AI score0.00224EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•20 views

PT-2025-44252

Name of the Vulnerable Software and Affected Versions StylemixThemes MasterStudy LMS Pro versions prior to 4.7.16 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for potential exploitation. Recommendatio...

5.4CVSS6.5AI score0.00216EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•20 views

PT-2025-44250

Name of the Vulnerable Software and Affected Versions StylemixThemes Masterstudy Elementor Widgets versions through 1.2.4 Description A missing authorization issue exists in StylemixThemes Masterstudy Elementor Widgets. The issue involves incorrectly configured access control security levels,...

5.4CVSS6.4AI score0.00175EPSS
SaveExploits0References4
OSV
OSV
•added 2024/11/01 2:15 p.m.•17 views

CVE-2024-37094

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MasterStudy LMS: from n/a through 3.2.12...

9.8CVSS5.8AI score0.00406EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•2 views

CVE-2024-43990: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

5.3CVSS5.8AI score0.00364EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/09 10:15 a.m.•11 views

CVE-2024-37090

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Masterstudy Elementor Widgets, StylemixThemes Consulting Elementor Widgets.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2; Consulting Elementor Widgets: fro...

8.8CVSS5.8AI score0.0053EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•1 views

CVE-2024-37090: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Masterstudy Elementor Widgets, StylemixThemes Consulting Elementor Widgets.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2; Consulting Elementor Widgets: fro...

8.8CVSS5.8AI score0.0053EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/24 12:15 p.m.•13 views

CVE-2024-37091

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0;...

8.8CVSS5.8AI score0.01243EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/24 12:00 a.m.•1 views

CVE-2024-37091: Improper Neutralization of Special Elements used in a Command

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0;...

9.9CVSS5.8AI score0.01243EPSS
SaveExploits0References1
Rows per page
Query Builder