Skip to contentStylemixthemes Motors vulnerabilities
- stylemixthemes motorsWordPress Motors plugin <= 1.4.128 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-666756.5 Medium
- stylemixthemes motorsWordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerabilityCVE-2026-1234674.3 Medium
- stylemixthemes motorsWordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerabilityCVE-2026-1234684.3 Medium
- stylemixthemes motorsWordPress Motors plugin <= 1.4.126 - SQL Injection vulnerabilityCVE-2026-1159649.3 Critical
- stylemixthemes motorsWordPress Motors theme <= 1.4.108 - Broken Access Control vulnerabilityCVE-2026-939507.5 High
- stylemixthemes motorsWordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerabilityCVE-2026-1043996.9 Medium
- stylemixthemes motorsMotors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featuredCVE-2026-910233.1 Low
- stylemixthemes motorsMotors < 1.4.124 - Listing Manager+ Stored XSS via Badge ColorCVE-2026-910226.8 Medium
- stylemixthemes motorsMotors < 1.4.121 - Unauthenticated Draft/Private Listing DisclosureCVE-2026-910165.3 Medium
- stylemix motorsWordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerabilityCVE-2026-666936.5 Medium
- stylemixthemes motorsWordPress Motors theme < 5.6.85 - Broken Access Control vulnerabilityCVE-2026-274336.5 Medium
- stylemixthemes motorsWordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerabilityCVE-2026-548287.5 High
- stylemixthemes motorsMotors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_mediaCVE-2026-78595.3 Medium
- stylemixthemes motorsWordPress Motors plugin <= 1.4.109 - SQL Injection vulnerabilityCVE-2026-548129.3 Critical
- stylemixthemes motorsWordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerabilityCVE-2026-548148.1 High
- stylemixthemes motorsWordPress Motors plugin < 1.4.107 - Broken Access Control vulnerabilityCVE-2026-395156.5 Medium
- stylemixthemes motorsWordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerabilityCVE-2025-643749.9 Critical
- stylemix motorsWordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityCVE-2025-546915.3 Medium
- stylemixthemes motors - eventsWordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerabilityCVE-2025-475869.0 Critical
- stylemixthemes motors - car dealer, rental & listing wordpress themeMotors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account TakeoverCVE-2025-4322Public exploitEPSS 15.4%9.8 Critical
- stylemixthemes motors - car dealer, rental & listing wordpress themeMotors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2024-137387.3 High
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerabilityCVE-2025-326548.1 High
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-upCVE-2025-34374.3 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2025-28085.4 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin InstallationCVE-2025-2807Public exploit8.8 High
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-321706.5 Medium
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerabilityCVE-2025-321428.8 High
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template CreationCVE-2024-137374.3 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom TitleCVE-2024-109705.4 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing AuthorizationCVE-2024-55455.3 Medium
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-462074.1 Medium
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-462087.1 High
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-387165.4 Medium
- stylemixthemes motors, motors - car dealer\, classifieds \& listing +1 moreMotors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File UploadCVE-2022-39898.8 High
- stylemixthemes motors - car dealer\, classifieds \& listingincludes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer &...CVE-2019-172296.1 Medium
- stylemixthemes motors - car dealer\, classifieds \& listingincludes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer &...CVE-2019-172286.5 Medium