Stylemixthemes Motors vulnerabilities
7 known vulnerabilities affecting stylemixthemes/motors.
Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH2MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2025-64374P2CRITICALCVSS 9.9≤ 5.6.812025-12-18
CVE-2025-64374 [CRITICAL] CWE-434 CVE-2025-64374: Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows
Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through <= 5.6.81.
nvd
CVE-2026-54812P2CRITICALCVSS 9.3≤ 1.4.1092026-06-17
CVE-2026-54812 [CRITICAL] CWE-89 CVE-2026-54812: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.109.
cvelistv5nvd
CVE-2026-54828P3HIGHCVSS 7.5≥ n/a, ≤ 1.4.1092026-06-25
CVE-2026-54828 [HIGH] CWE-862 CVE-2026-54828: Unauthenticated Broken Access Control in Motors <= 1.4.109 versions.
Unauthenticated Broken Access Control in Motors <= 1.4.109 versions.
nvd
CVE-2026-27433P3MEDIUMCVSS 6.5≥ n/a, ≤ 5.6.802026-07-02
CVE-2026-27433 [MEDIUM] CWE-862 CVE-2026-27433: Unauthenticated Broken Access Control in Motors <= 5.6.80 versions.
Unauthenticated Broken Access Control in Motors <= 5.6.80 versions.
nvd
CVE-2026-104399P3MEDIUMCVSS 6.9≥ n/a, ≤ 1.4.1242026-10-06
CVE-2026-104399 [MEDIUM] CWE-201 CVE-2026-104399: Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retr
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data.
This issue affects Motors: from n/a through 1.4.124.
nvd
CVE-2026-39515P3MEDIUMCVSS 6.5≥ n/a, < 1.4.1072026-06-15
CVE-2026-39515 [MEDIUM] CWE-862 CVE-2026-39515: Subscriber Broken Access Control in Motors < 1.4.107 versions.
Subscriber Broken Access Control in Motors < 1.4.107 versions.
nvd
CVE-2026-54814HIGHCVSS 8.1≥ n/a, ≤ 1.4.1092026-06-17
CVE-2026-54814 [HIGH] CWE-98 WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability
WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Motors allows PHP Local File Inclusion.
This issue affects Motors: from n/a through 1.4.109.
cvelistv5