CVE-2026-54812
published 2026-06-17CVE-2026-54812: WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
critical9.3CVSS 3.1
AVNACLPRNUINSCCHINAL
EPSS
0.29%
20.8th percentile
WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors allows Blind SQL Injection.
This issue affects Motors: from n/a through 1.4.109.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| stylemixthemes | motors | n/a – 1.4.109 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors allows Blind SQL Injection.
ghsa_unreviewed·2026-06-17
CVE-2026-54812 [CRITICAL] CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors allows Blind SQL Injection.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors allows Blind SQL Injection.
This issue affects Motors: from n/a through 1.4.109.
VulDB
Stylemixmes Motors Plugin up to 1.4.109 on WordPress sql injection
vuldb·2026-06-17
CVE-2026-54812 [CRITICAL] Stylemixmes Motors Plugin up to 1.4.109 on WordPress sql injection
A vulnerability was found in Stylemixmes Motors Plugin up to 1.4.109 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation results in sql injection.
This vulnerability is reported as CVE-2026-54812. The attack can be launched remotely. No exploit exists.
CVEList
WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
cvelistv5·2026-06-17·CVSS 9.3
CVE-2026-54812 [CRITICAL] CWE-89 WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors allows Blind SQL Injection.
This issue affects Motors: from n/a through 1.4.109.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-17
Published