Vulnerabilities

TI-2026-05856 CVE-2026-6674 · GHSA-c55q-xqj2-gc6c

Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter

LOW 29

The Plugin: CMS für Motorrad Werkstätten plugin for WordPress is vulnerable to SQL Injection via the 'arttype' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied param…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00324 Published 2026-04-21 No fix listed CWE-89

TI-2026-05659 CVE-2026-6451 · GHSA-8mf7-m4px-v9qq

CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery

LOW 19

The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.0.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00225 Published 2026-04-17 No fix listed CWE-352

Vulnerabilities

Filters

Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter

CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery