Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-54812 EUVD-2026-37727GHSA-wv5w-w5jr-6p6w

WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability

Published Jun 17, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.109.

Affected products

VendorProductAffectedFixed
StylemixThemes Motors ≤ 1.4.109 —

References