https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3437.htmlhttps://patchthecve.com/cve/CVE-2025-3437.htmlWed, 17 Jun 2026 09:19:57 +0000MEDIUM 4.3: The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in the ajax_actions.php file in all versions up to, and including, 1.4.66. This makes it possible for authenticated https://patchthecve.com/cve/CVE-2025-2808.htmlhttps://patchthecve.com/cve/CVE-2025-2808.htmlWed, 17 Jun 2026 09:07:39 +0000MEDIUM 5.4: The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Phone Number parameter in all versions up to, and including, 1.4.63 due to insufficient input sanitization and output escaping. This makes it possible for authenticated https://patchthecve.com/cve/CVE-2025-2807.htmlhttps://patchthecve.com/cve/CVE-2025-2807.htmlWed, 17 Jun 2026 09:07:39 +0000HIGH 8.8: The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check in the mvl_setup_wizard_install_plugin() function in all versions up to, and including, 1.4.64. This makes it possible for authenticated atthttps://patchthecve.com/cve/CVE-2024-13737.htmlhttps://patchthecve.com/cve/CVE-2024-13737.htmlWed, 17 Jun 2026 07:02:38 +0000MEDIUM 4.3: The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the motors_create_template and motors_delete_template functions in all versions up to, and including, 1.4.57. This makes it possible for authenhttps://patchthecve.com/cve/CVE-2024-10970.htmlhttps://patchthecve.com/cve/CVE-2024-10970.htmlWed, 17 Jun 2026 06:56:48 +0000MEDIUM 5.4: The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.43. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. Thhttps://patchthecve.com/cve/CVE-2024-5545.htmlhttps://patchthecve.com/cve/CVE-2024-5545.htmlWed, 17 Jun 2026 08:16:09 +0000MEDIUM 5.3: The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stm_edit_delete_user_car function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to unpub