Skip to content
Threat Feed
Subscribe

Product

Motors – Car Dealership & Classified Listings Plugin (<= 1.4.112)

1 brief RSS
high advisory

CVE-2026-13114: Stored Cross-Site Scripting in WordPress Motors - Car Dealership & Classified Listings Plugin

An unauthenticated attacker can exploit CVE-2026-13114, a Stored Cross-Site Scripting vulnerability in the WordPress Motors - Car Dealership & Classified Listings Plugin versions up to 1.4.112, by injecting arbitrary web scripts into comment content or user biographical information, leading to client-side code execution when a victim views the affected page.

Motors – Car Dealership & Classified Listings Plugin wordpress xss web-application cve plugin-vulnerability
2t 1c