Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/30 8:16 a.m.•18 views

CVE-2026-6806

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS0.00273EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/30 7:41 a.m.•39 views

CVE-2026-6806 Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS0.00273EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/30 7:41 a.m.•12 views

CVE-2026-6806 Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 7:41 a.m.•25 views

CVE-2026-6806

The Motors – Car Dealership & Classified Listings Plugin for WordPress is vulnerable to a time-based blind SQL Injection in all versions up to and including 1.4.109 . The flaw exists in the 'stm_lat' and 'stm_lng' parameters due to insufficient escaping of user-supplied input and a lack of proper...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/30 7:41 a.m.•18 views

EUVD-2026-89669

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•14 views

CVE-2026-6806: Improper Neutralization of Special Elements used in an SQL Command

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder