Vendor

Stylemix

1 brief RSS

CVE-2026-13114: Stored Cross-Site Scripting in WordPress Motors - Car Dealership & Classified Listings Plugin

An unauthenticated attacker can exploit CVE-2026-13114, a Stored Cross-Site Scripting vulnerability in the WordPress Motors - Car Dealership & Classified Listings Plugin versions up to 1.4.112, by injecting arbitrary web scripts into comment content or user biographical information, leading to client-side code execution when a victim views the affected page.

Motors – Car Dealership & Classified Listings Plugin wordpress xss web-application cve plugin-vulnerability

2t 1c 1h ago