Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-66675 EUVD-2026-119918GHSA-pw4f-g922-2766

WordPress Motors plugin <= 1.4.128 - Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Stored XSS.This issue affects Motors: from n/a through 1.4.128.

Affected products

VendorProductAffectedFixed
StylemixThemes Motors ≤ 1.4.128 —

References