CVE-2026-115964
WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: partial
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
The Motors plugin for WordPress, a car dealership and classified listings extension by StylemixThemes, is affected by this vulnerability. An attacker could exploit it to run blind SQL injection attacks against the website's database, potentially reading or altering sensitive data.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.126.
Affected versions
- motors-car-dealership-classified-listings
through 1.4.126