CVE-2026-104746

The Motors – Car Dealership & Classified Listings Plugin for WordPress (versions up to and including 1.4.125 ) is vulnerable to arbitrary file deletion . The root cause is insufficient file path validation within the stm_listings_ajax_save_user_data function. Authenticated attackers with Subscrib...