Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Stylemix CVE-2026-104746
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Stylemix CVE-2026-116562
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s[make]' parameter in
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Stylemix CVE-2026-116617
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The v
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Stylemix CVE-2026-118090
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Stylemix CVE-2026-80069
MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Stylemix CVE-2026-80067
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit