SQL Injection Vulnerability in StylemixThemes Motors Car Dealership Plugin
CVE-2026-115964

9.3CRITICAL

Key Information:

Vendor

WordPress

Status
Vendor
CVE Published:
29 October 2026

What is CVE-2026-115964?

An SQL Injection vulnerability exists in the Motors plugin by StylemixThemes that allows attackers to execute arbitrary SQL commands through improperly sanitized input. Specifically, the plugin's handling of special elements in SQL commands can be exploited, potentially allowing unauthorized access to sensitive information stored in the database. This vulnerability impacts versions from n/a through 1.4.126. It is crucial for website administrators to update their plugins and implement security measures to protect against potential exploitation.

Affected Version(s)

Motors 0 <= 1.4.126

References

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

anhdung1329 | Patchstack Bug Bounty Program
.