WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
motors-car-dealership-classified-listings
Published
2026-04-21
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.107 - Missing Authorization
Slug
motors-car-dealership-classified-listings
Published
2026-05-11
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.104 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter
Slug
motors-car-dealership-classified-listings
Published
2026-05-13
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.108 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter
Slug
motors-car-dealership-classified-listings
Published
2026-06-01
Title
Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media
Slug
motors-car-dealership-classified-listings
Published
2026-06-17
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Unauthenticated SQL Injection
Slug
motors-car-dealership-classified-listings
Published
2026-06-17
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Authenticated (Subscriber+) Local File Inclusion
Slug
motors-car-dealership-classified-listings
Published
2026-06-17
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Missing Authorization
Slug
motors-car-dealership-classified-listings
Published
2026-06-30
Title
Motors < 1.4.112 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter
Slug
motors-car-dealership-classified-listings
Published
2026-07-10
Title
Motors < 1.4.113 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info
Slug
motors-car-dealership-classified-listings
Published
2026-08-10
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.114 - Missing Authorization
Slug
motors-car-dealership-classified-listings
Published
2026-09-17
Title
Motors – Car Dealership & Classified Listings < 1.4.121 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
Slug
motors-car-dealership-classified-listings
Published
2026-09-15
Title
Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure
Slug
motors-car-dealership-classified-listings
Published
2026-10-05
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.125 - Unauthenticated Information Exposure
Slug
motors-car-dealership-classified-listings
Published
2026-09-29
Title
Motors < 1.4.110 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters
Slug
motors-car-dealership-classified-listings
Published
2026-09-30
Title
Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color
Slug
motors-car-dealership-classified-listings
Published
2026-09-30
Title
Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured
Slug
motors-car-dealership-classified-listings
Published
2026-10-09
Title
Motors < 1.4.125 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter
Slug
motors-car-dealership-classified-listings
Published
2026-10-27
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.127 - Unauthenticated SQL Injection
Slug
motta-addons
Published
2026-03-20
Title
Motta Addons < 1.6.1 - Reflected Cross-Site Scripting
Slug
mountdev-ai-mcp-connector
Published
2026-07-22
Title
MountDev AI MCP Connector for WordPress < 1.6.2 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint
Slug
mountdev-ai-mcp-connector
Published
2026-09-03
Title
MountDev AI MCP Connector for WordPress < 1.6.6 - Missing Authorization
Slug
mousewheel-smooth-scroll
Published
2021-10-18
Title
MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF
Slug
move-addons
Published
2024-03-22
Title
Move Addons for Elementor < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
move-addons
Published
2024-03-29
Title
Move Addons for Elementor < 1.3.0 - Missing Authorization
Slug
move-addons
Published
2024-05-07
Title
Move Addons for Elementor < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting