CVE-2026-7859 Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media

The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices...

CVE-2026-7859

CVE-2026-7859 affects the Motors WordPress plugin before 1.4.110. The vulnerability arises from missing proper authorisation and CSRF checks on an AJAX action, allowing unauthenticated attackers to modify arbitrary post metadata (e.g., gallery, featured image) and, on WooCommerce sites, product p...

EUVD-2026-38214

The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices...

CVE-2026-8918

creationtimestamp| type| source ---|---|--- 2026-06-22 05:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mou6me7odi2j...

CVE-2026-35223

creationtimestamp| type| source ---|---|--- 2026-06-22 05:16:43+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou4zrin3q22...

CVE-2026-35222

creationtimestamp| type| source ---|---|--- 2026-06-22 05:01:52+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou477ypkc2z...

CVE-2026-48687

creationtimestamp| type| source ---|---|--- 2026-06-22 05:01:37+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou46rwq6m2f...

CVE-2026-9475

creationtimestamp| type| source ---|---|--- 2026-06-22 04:31:34+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou2j2f34m2y...

CVE-2026-9458

creationtimestamp| type| source ---|---|--- 2026-06-22 04:17:05+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzp5h7px2b...

CVE-2026-9457

creationtimestamp| type| source ---|---|--- 2026-06-22 04:16:43+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzoies3n2r...

CVE-2026-9456

creationtimestamp| type| source ---|---|--- 2026-06-22 04:16:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzobguut2b...

CVE-2026-9387

creationtimestamp| type| source ---|---|--- 2026-06-22 02:47:03+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motuo2fcjb2n...

CVE-2026-9386

creationtimestamp| type| source ---|---|--- 2026-06-22 02:46:57+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motuntmise2z...

CVE-2026-12815

creationtimestamp| type| source ---|---|--- 2026-06-22 02:16:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motsydhj222t...

CVE-2026-12810

creationtimestamp| type| source ---|---|--- 2026-06-22 02:02:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mots6qzvg62h...

CVE-2026-56265

creationtimestamp| type| source ---|---|--- 2026-06-22 00:39:16+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnjm7sut2j 2026-06-27 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpceht2wcr2h...

CVE-2026-43633

creationtimestamp| type| source ---|---|--- 2026-06-22 00:36:29+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motneopfss2b...

CVE-2026-45570

creationtimestamp| type| source ---|---|--- 2026-06-22 00:32:40+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn5ulxzi2s 2026-08-21 22:46:03+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mtmtndjnpz2d...

EUVD-2026-38196

A security flaw has been discovered in Edimax BR-6478AC V2 1.23. Affected by this vulnerability is the function mp of the file /goform/mp of the component POST Request Handler. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. Th...

PT-2026-51403

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description A denial of service issue exists in the 'POST /app/demo' endpoint. Authenticated users with organization write permissions can create an unlimited number of demo applications because the system lack...