<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: stylemix-motors-car-dealership-classified-listings-plugin</title><description>Every new CVE for stylemix-motors-car-dealership-classified-listings-plugin.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116617: Motors &lt;= 1.4.128 - Authenticated (Subscriber+) File Deletion via &apos;stm_dealer_logo_path&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-116617/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116617/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 04:48:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96563: Motors &lt;= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via &apos;stm_f_s&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-96563/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96563/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 07:41:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6806: Motors &lt;= 1.4.109 - Unauthenticated Blind SQL Injection via &apos;stm_lat&apos;/&apos;stm_lng&apos; Parameters</title><link>https://agentprime.io/advisories/CVE-2026-6806/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6806/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Sep 2026 07:41:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16750: Motors – Car Dealership &amp; Classified Listings &lt;= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure</title><link>https://agentprime.io/advisories/CVE-2026-16750/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16750/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 21:28:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13114: Motors &lt;= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info</title><link>https://agentprime.io/advisories/CVE-2026-13114/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13114/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Jul 2026 02:31:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12435: Motors &lt;= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via &apos;stm_mark_as_sold_car&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-12435/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12435/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 07:53:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3892: Motors – Car Dealer, Classifieds &amp; Listing &lt;= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via &apos;stm_dealer_logo_path&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-3892/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3892/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 May 2026 06:44:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1934: Motors – Car Dealership &amp; Classified Listings Plugin &lt;= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via &apos;stm_payment_status&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-1934/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1934/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 08:27:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10494: Motors – Car Dealership &amp; Classified Listings Plugin &lt;= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion</title><link>https://agentprime.io/advisories/CVE-2025-10494/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10494/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Oct 2025 03:31:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3437: Motors – Car Dealership &amp; Classified Listings Plugin &lt;= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up</title><link>https://agentprime.io/advisories/CVE-2025-3437/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3437/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Apr 2025 09:21:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2808: Motors – Car Dealership &amp; Classified Listings Plugin &lt;= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-2808/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2808/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Apr 2025 09:21:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2807: Motors – Car Dealership &amp; Classified Listings Plugin &lt;= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation</title><link>https://agentprime.io/advisories/CVE-2025-2807/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2807/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Apr 2025 09:21:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13737: Motors – Car Dealer, Classifieds &amp; Listing &lt;= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation</title><link>https://agentprime.io/advisories/CVE-2024-13737/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13737/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Mar 2025 02:22:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10970: Motors – Car Dealer, Classifieds &amp; Listing &lt;= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title</title><link>https://agentprime.io/advisories/CVE-2024-10970/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10970/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jan 2025 01:49:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5545: Motors – Car Dealer, Classifieds &amp; Listing &lt;= 1.4.9 - Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2024-5545/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5545/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jul 2024 07:37:04 GMT</pubDate><category>CVE</category></item></channel></rss>