Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Motors 1.4.124 Clear all filters
TI-2026-65913 CVE-2026-91023 · GHSA-whfp-wchg-v9xw

Missing authorization in Motors

Priority LOW 14

The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing management actions, allowing authenticated attackers with subscriber-…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00133 Published 2026-10-02 Fixed in 1.4.124 CWE-862
TI-2026-65912 CVE-2026-91022 · GHSA-h25v-5897-j3vf

Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color

Priority LOW 31

The Motors WordPress plugin before 1.4.124 does not sanitise and escape a listing badge setting before outputting it inside an HTML attribute, allowing users with a custom, administrator-assigned listing-management role…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00229 Published 2026-10-02 Fixed in 1.4.124 CWE-79