WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
motopress-slider-lite
Published
2021-09-21
Title
Responsive WordPress Slider <= 2.2.0 - Reflected Cross-Site Scripting
Slug
motor-racing-league
Published
2023-04-14
Title
Motor Racing League <= 1.9.9 - Admin+ XSS
Slug
motordesk
Published
2026-06-23
Title
MotorDesk < 1.1.3 - Cross-Site Request Forgery to Settings Update
Slug
motors-car-dealership-classified-listings
Published
2019-09-20
Title
Motors Car Dealer & Classified Ads < 1.4.1 - Multiple Issues
Slug
motors-car-dealership-classified-listings
Published
2022-11-21
Title
Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload
Slug
motors-car-dealership-classified-listings
Published
2023-04-19
Title
Motors – Car Dealer & Classified Ads < 1.4.5 - CSRF
Slug
motors-car-dealership-classified-listings
Published
2023-10-19
Title
Motors – Car Dealer & Classified Ads < 1.4.7 - Reflected XSS
Slug
motors-car-dealership-classified-listings
Published
2023-10-19
Title
Motors – Car Dealer & Classified Ads < 1.4.7 - Unauthenticated SSRF
Slug
motors-car-dealership-classified-listings
Published
2024-07-01
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.11 - Missing Authorization
Slug
motors-car-dealership-classified-listings
Published
2025-01-15
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.44 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title
Slug
motors-car-dealership-classified-listings
Published
2025-03-21
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.58 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation
Slug
motors-car-dealership-classified-listings
Published
2025-04-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.65 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
motors-car-dealership-classified-listings
Published
2025-04-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.64 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
motors-car-dealership-classified-listings
Published
2025-04-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.67 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
Slug
motors-car-dealership-classified-listings
Published
2025-04-04
Title
Motors < 1.4.72 - Contributor+ Local File Inclusion
Slug
motors-car-dealership-classified-listings
Published
2025-04-04
Title
Motors < 1.4.72 - Contributor+ Stored XSS
Slug
motors-car-dealership-classified-listings
Published
2025-04-09
Title
Motors < 1.4.72 - Unauthenticated Local File Inclusion
Slug
motors-car-dealership-classified-listings
Published
2025-07-30
Title
Motors < 1.4.81 - Unauthenticated Insecure Direct Object Reference
Slug
motors-car-dealership-classified-listings
Published
2025-10-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.90 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
motors-car-dealership-classified-listings
Published
2026-04-21
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.107 - Missing Authorization
Slug
motors-car-dealership-classified-listings
Published
2026-05-11
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.104 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter
Slug
motors-car-dealership-classified-listings
Published
2026-05-13
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.108 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter
Slug
motors-car-dealership-classified-listings
Published
2026-06-01
Title
Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media
Slug
motors-car-dealership-classified-listings
Published
2026-06-17
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Unauthenticated SQL Injection
Slug
motors-car-dealership-classified-listings
Published
2026-06-17
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Authenticated (Subscriber+) Local File Inclusion