Advisories · Technology
stylemix Motors – Car Dealership & Classified Listings Plugin.
Every CVE that names stylemix Motors – Car Dealership & Classified Listings Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Path traversal
- CVSS 6.4 Medium
Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Cross-site scripting (XSS)
- CVSS 7.5 High
Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters
- stylemix Motors – Car Dealership & Classified Listings Plugin
- SQL injection
- CVSS 5.3 Medium
Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Broken access control
- CVSS 7.2 High
Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Broken access control
- CVSS 8.1 High
Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Path traversal
- CVSS 4.3 Medium
Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Broken access control
- CVSS 8.1 High
Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Path traversal
- CVSS 4.3 Medium
Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Broken access control
- CVSS 5.4 Medium
Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Cross-site scripting (XSS)
- CVSS 8.8 High
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Broken access control
- CVSS 4.3 Medium
Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Broken access control
- CVSS 5.4 Medium
Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Code injection
- CVSS 5.3 Medium
Motors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorization
- stylemix Motors – Car Dealership & Classified Listings Plugin
- Broken access control