Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-115964 EUVD-2026-112737GHSA-374v-vp9g-vwxh

WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability

Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.126.

Affected products

VendorProductAffectedFixed
StylemixThemes Motors ≤ 1.4.126 —

References