Skip to content

Stylemix Motors vulnerabilities

stylemix motors – car dealership & classified listings pluginMotors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User MetaCVE-2026-1047468.1 HighNovember 7, 2026
stylemix motors – car dealership & classified listings pluginMotors <= 1.4.128 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Taxonomy Term Name via 'stm_f_s' ParameterCVE-2026-1165626.4 MediumNovember 7, 2026
stylemix motors – car dealership & classified listings pluginMotors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' ParameterCVE-2026-1166178.1 HighNovember 5, 2026
stylemix motors – car dealership & classified listings pluginMotors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' ParameterCVE-2026-965636.4 MediumOctober 10, 2026
stylemix motors – car dealership & classified listings pluginMotors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' ParametersCVE-2026-68067.5 HighSeptember 30, 2026
stylemix motors – car dealership & classified listings pluginMotors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings ExposureCVE-2026-167505.3 MediumSeptember 17, 2026
stylemix motorsWordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerabilityCVE-2026-666936.5 MediumAugust 13, 2026
stylemix motors – car dealership & classified listings pluginMotors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical InfoCVE-2026-131147.2 HighJuly 11, 2026
stylemix motors – car dealership & classified listings pluginMotors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' ParameterCVE-2026-124354.3 MediumJuly 1, 2026
stylemix motors – car dealership & classified listings pluginMotors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' ParameterCVE-2026-38928.1 HighMay 14, 2026
stylemix motors – car dealership & classified listings pluginMotors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' ParameterCVE-2026-19344.3 MediumMay 12, 2026
stylemix motors – car dealership & classified listings pluginMotors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2025-104948.1 HighOctober 8, 2025
stylemix motorsWordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityCVE-2025-546915.3 MediumAugust 14, 2025
stylemix motorsWordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerabilityCVE-2025-326548.1 HighApril 11, 2025
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-upCVE-2025-34374.3 MediumApril 8, 2025
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2025-28085.4 MediumApril 8, 2025
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin InstallationCVE-2025-2807Public exploit8.8 HighApril 8, 2025
stylemix motorsWordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-321706.5 MediumApril 4, 2025
stylemix motorsWordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerabilityCVE-2025-321428.8 HighApril 4, 2025
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template CreationCVE-2024-137374.3 MediumMarch 22, 2025
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom TitleCVE-2024-109705.4 MediumJanuary 16, 2025
stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing AuthorizationCVE-2024-55455.3 MediumJuly 2, 2024
stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-462074.1 MediumNovember 13, 2023
stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-462087.1 HighOctober 27, 2023
stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-387165.4 MediumMay 25, 2023