CVE-2026-115964

Name of the Vulnerable Software and Affected Versions StylemixThemes Motors versions prior to 1.4.127

Description An improper neutralization of special elements used in an SQL command allows for Blind SQL Injection within the vehicle listings extension. This issue enables an attacker to execute blind SQL injection attacks against the database to read or modify sensitive data. Blind SQL Injection is a technique where an attacker asks the database true or false questions and determines the answer based on the application's response.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.