Advisories · Technology

StylemixThemes Consulting Elementor Widgets.

Every CVE that names StylemixThemes Consulting Elementor Widgets among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-64361 CVE record

CVSS 6.5 Medium

WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
- StylemixThemes Consulting Elementor Widgets
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2025
CVE-2025-64360 CVE record

CVSS 7.5 High

WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability
- StylemixThemes Consulting Elementor Widgets
- File inclusion
Not analysed yet 31 Oct 2025
CVE-2024-37090 CVE record

CVSS 8.5 High

SQL Injection vulnerability in multiple StylemixThemes premium themes
- StylemixThemes Masterstudy Elementor Widgets
- StylemixThemes Consulting Elementor Widgets
- SQL injection
Not analysed yet 9 Jul 2024
CVE-2024-37092 CVE record

CVSS 8.5 High

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability
- StylemixThemes Consulting Elementor Widgets
- Path traversal
Not analysed yet 24 Jun 2024
CVE-2024-37091 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability
- StylemixThemes Consulting Elementor Widgets
- StylemixThemes Masterstudy Elementor Widgets
- Command injection
Not analysed yet 24 Jun 2024
CVE-2024-37089 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability
- StylemixThemes Consulting Elementor Widgets
- Path traversal
Not analysed yet 24 Jun 2024