Known vulnerabilities in Stylemix Motors – Car Dealership & Classified Listings Plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-104746 | Motors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User Meta | 8.1 High | Nov 7, 2026 |
| CVE-2026-116562 | Motors <= 1.4.128 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Taxonomy Term Name via 'stm_f_s' Parameter | 6.4 Medium | Nov 7, 2026 |
| CVE-2026-116617 | Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter | 8.1 High | Nov 5, 2026 |
| CVE-2026-96563 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Oct 10, 2026 |
| CVE-2026-6806 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL… | 7.5 High | Sep 30, 2026 |
| CVE-2026-16750 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of… | 5.3 Medium | Sep 17, 2026 |
| CVE-2026-13114 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site… | 7.2 High | Jul 11, 2026 |
| CVE-2026-12435 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to authorization bypass in… | 4.3 Medium | Jul 1, 2026 |
| CVE-2026-3892 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion… | 8.1 High | May 14, 2026 |
| CVE-2026-1934 | The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Payment Bypass via insecure user… | 4.3 Medium | May 12, 2026 |
| CVE-2025-10494 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion… | 8.1 High | Oct 8, 2025 |
| CVE-2025-3437 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification… | 4.3 Medium | Apr 8, 2025 |
| CVE-2025-2808 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site… | 5.4 Medium | Apr 8, 2025 |
| CVE-2025-2807 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin… | 8.8 High | Apr 8, 2025 |
| CVE-2024-13737 | The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data… | 4.3 Medium | Mar 22, 2025 |
| CVE-2024-10970 | The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution… | 5.4 Medium | Jan 16, 2025 |
| CVE-2024-5545 | The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data… | 5.3 Medium | Jul 2, 2024 |
Other Stylemix products
MasterStudy LMS 15
Cost Calculator Builder 13
Directory Listings WordPress plugin – uListing 12
MasterStudy LMS WordPress Plugin – for Online Courses and Education 11
uListing 11
Motors 5
Pearl – Header Builder 3
WordPress Header Builder Plugin – Pearl 3
MasterStudy LMS WordPress Plugin 2
Motors – Car Dealer, Classifieds & Listing 2
Pearl 2
Booking Calendar | Appointment Booking | BookIt 1