Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/30 8:16 a.m.•17 views

CVE-2026-6806

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS0.00273EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/30 7:41 a.m.•39 views

CVE-2026-6806 Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS0.00273EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/30 7:41 a.m.•12 views

CVE-2026-6806 Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/30 7:41 a.m.•17 views

EUVD-2026-89669

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 7:41 a.m.•25 views

CVE-2026-6806

The Motors – Car Dealership & Classified Listings Plugin for WordPress is vulnerable to a time-based blind SQL Injection in all versions up to and including 1.4.109 . The flaw exists in the 'stm_lat' and 'stm_lng' parameters due to insufficient escaping of user-supplied input and a lack of proper...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•14 views

CVE-2026-6806: Improper Neutralization of Special Elements used in an SQL Command

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder