Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...

CVE-2026-123467

Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128...

CVE-2026-123467

The Motors plugin for WordPress (specifically motors-car-dealership-classified-listings by StylemixThemes) is vulnerable to a Missing Authorization vulnerability (CWE-862) in versions up to and including 1.4.128 . The root cause is incorrectly configured access control security levels , which cou...

EUVD-2026-119247

Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128...

CVE-2026-123467 WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128...

WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by LeeB in WordPress Plugin Motors versions = 1.4.128...

CVE-2026-104746

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the stmlistingsajaxsaveuserdata function in all versions up to, and including, 1.4.125 This makes it possible for authenticated...

CVE-2026-104746

The Motors – Car Dealership & Classified Listings Plugin for WordPress (versions up to and including 1.4.125 ) is vulnerable to arbitrary file deletion . The root cause is insufficient file path validation within the stm_listings_ajax_save_user_data function. Authenticated attackers with Subscrib...

EUVD-2026-119149

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the stmlistingsajaxsaveuserdata function in all versions up to, and including, 1.4.125 This makes it possible for authenticated...

CVE-2026-104746 Motors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User Meta

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the stmlistingsajaxsaveuserdata function in all versions up to, and including, 1.4.125 This makes it possible for authenticated...

CVE-2026-123468

Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128...

EUVD-2026-119129

Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128...

CVE-2026-123468 WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128...

CVE-2026-123468

The StylemixThemes Motors WordPress plugin (specifically motors-car-dealership-classified-listings ) is vulnerable to a Missing Authorization flaw in versions up to and including 1.4.128 . This vulnerability stems from incorrectly configured access control security levels , potentially allowing a...

WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by zhugez in WordPress Plugin Motors versions = 1.4.128...

WordPress Motors – Car Dealership & Classified Listings Plugin plugin <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by Maciej Komorowski in WordPress Plugin Motors versions = 1.4.125...

CVE-2026-116562

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfsmake' parameter in all versions up to, and including, 1.4.128 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

EUVD-2026-118550

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfsmake' parameter in all versions up to, and including, 1.4.128 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2026-116562

The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.4.128 . The flaw is caused by insufficient input sanitization and output escaping within the 'stm_f_s[make]' parameter. This allows authe...