CVE-2026-116617

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because stmsaveuserextrafields, hooked to personaloptionsupdate, writes the attacker-controlled stmdealerlogopath...