CVE-2026-6806

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2026-89669

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-6806

The Motors – Car Dealership & Classified Listings Plugin for WordPress is vulnerable to a time-based blind SQL Injection in all versions up to and including 1.4.109 . The flaw exists in the 'stm_lat' and 'stm_lng' parameters due to insufficient escaping of user-supplied input and a lack of proper...