CVE-2026-104746

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the stmlistingsajaxsaveuserdata function in all versions up to, and including, 1.4.125 This makes it possible for authenticated...