Motors

WordPress plugin · motors · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Motors on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 6.8	Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color CVE.org	>=0, <1.4.124	v1.4.124	CVE-2026-91022	Oct 2, 2026
MEDIUM CVSS 5.3	Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure CVE.org	>=0, <1.4.121	v1.4.121	CVE-2026-91016	Sep 17, 2026
MEDIUM CVSS 5.3	Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media CVE.org	>=0, <1.4.110	v1.4.110	CVE-2026-7859	Jun 22, 2026
LOW CVSS 3.1	Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured CVE.org	>=0, <1.4.124	v1.4.124	CVE-2026-91023	Oct 2, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.