Skip to content
OpenAdvisories
High · 8.1 CVE-2026-54814 EUVD-2026-37709GHSA-wmhf-h8j7-vmpf

WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Motors allows PHP Local File Inclusion.

This issue affects Motors: from n/a through 1.4.109.

Affected products

VendorProductAffectedFixed
StylemixThemes Motors ≤ 1.4.109 —

References