Vulnerabilities > Stylemixthemes > Motors CAR Dealer Classifieds Listing > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-07-02 CVE-2024-5545 Missing Authorization vulnerability in Stylemixthemes Motors - CAR Dealer, Classifieds & Listing
The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stm_edit_delete_user_car function in all versions up to, and including, 1.4.8.
network
low complexity
stylemixthemes CWE-862
5.3
2023-10-27 CVE-2023-46208 Cross-site Scripting vulnerability in Stylemixthemes Motors - CAR Dealer, Classifieds & Listing
Unauth.
network
low complexity
stylemixthemes CWE-79
6.1
2020-02-24 CVE-2019-17229 Cross-site Scripting vulnerability in Stylemixthemes Motors - CAR Dealer, Classifieds & Listing
includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress has multiple stored XSS issues.
4.3
2020-02-24 CVE-2019-17228 Insufficient Verification of Data Authenticity vulnerability in Stylemixthemes Motors - CAR Dealer, Classifieds & Listing
includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.
network
low complexity
stylemixthemes CWE-345
6.4