PT-2026-52413 · Stylemixthemes+1 · Motors+1

Haind

·

CVE-2026-54828

·

Published

2026-06-17

·

Updated

2026-06-25

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Motors versions prior to 1.4.110
Description The Motors – Car Dealership & Classified Listings Plugin for WordPress contains a broken access control issue. This is caused by a missing capability check within a function, allowing unauthenticated attackers to perform unauthorized actions.
Recommendations Update the plugin to a version later than 1.4.109.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-54828

Affected Products

Motors
Motors – Car Dealership & Classified Listings Plugin