Motors – Car Dealership & Classified Listings Plugin vulnerabilities
Plugin slug motors-car-dealership-classified-listings · 41 known vulnerabilities · latest disclosed 2026-11-07 · WordPress.org page
Every listed vulnerability has a fix. Version 1.4.129 or later is not affected by any of them. If your site runs an older version, update it.
14 of 41 rated high or critical (CVSS 7 or more).
Known vulnerabilities in Motors – Car Dealership & Classified Listings Plugin
| Severity | Affected versions | Fixed in | CVE | Published | Details |
|---|---|---|---|---|---|
| Medium 4.3 | <= 1.4.128 | 1.4.129 | CVE-2026-123467 | 2026-11-07 | Advisory |
| Medium 4.3 | <= 1.4.128 | 1.4.129 | CVE-2026-123468 | 2026-11-07 | Advisory |
| Medium 6.4 | <= 1.4.128 | 1.4.129 | CVE-2026-66675 | 2026-11-07 | Advisory |
| High 8.1 | <= 1.4.125 | 1.4.126 | CVE-2026-104746 | 2026-11-06 | Advisory |
| Medium 6.4 | <= 1.4.128 | 1.4.129 | CVE-2026-116562 | 2026-11-06 | Advisory |
| High 8.1 | <= 1.4.128 | 1.4.129 | CVE-2026-116617 | 2026-11-04 | Advisory |
| High 7.5 | <= 1.4.126 | 1.4.127 | CVE-2026-115964 | 2026-10-27 | Advisory |
| Medium 6.4 | <= 1.4.124 | 1.4.125 | CVE-2026-96563 | 2026-10-09 | Advisory |
| Medium 5.3 | <= 1.4.124 | 1.4.125 | CVE-2026-104399 | 2026-10-05 | Advisory |
| Medium 6.4 | <= 1.4.123 | 1.4.124 | CVE-2026-91022 | 2026-09-30 | Advisory |
| Medium 4.3 | <= 1.4.123 | 1.4.124 | CVE-2026-91023 | 2026-09-30 | Advisory |
| High 7.5 | <= 1.4.109 | 1.4.110 | CVE-2026-6806 | 2026-09-29 | Advisory |
| Medium 5.3 | <= 1.4.120 | 1.4.121 | CVE-2026-16750 | 2026-09-17 | Advisory |
| Medium 5.3 | <= 1.4.120 | 1.4.121 | CVE-2026-91016 | 2026-09-15 | Advisory |
| Medium 4.3 | <= 1.4.113 | 1.4.114 | CVE-2026-66693 | 2026-08-10 | Advisory |
| High 7.2 | <= 1.4.112 | 1.4.113 | CVE-2026-13114 | 2026-07-10 | Advisory |
| Medium 4.3 | <= 1.4.111 | 1.4.112 | CVE-2026-12435 | 2026-06-30 | Advisory |
| Medium 4.3 | < 1.4.110 | 1.4.110 | CVE-2026-7859 | 2026-06-22 | Advisory |
| High 7.5 | <= 1.4.109 | 1.4.110 | CVE-2026-54814 | 2026-06-17 | Advisory |
| High 7.5 | <= 1.4.109 | 1.4.110 | CVE-2026-54812 | 2026-06-17 | Advisory |
| Medium 5.3 | <= 1.4.109 | 1.4.110 | CVE-2026-54828 | 2026-06-17 | Advisory |
| High 8.1 | <= 1.4.107 | 1.4.108 | CVE-2026-3892 | 2026-05-13 | Advisory |
| Medium 4.3 | <= 1.4.103 | 1.4.104 | CVE-2026-1934 | 2026-05-11 | Advisory |
| Medium 4.3 | < 1.4.107 | 1.4.107 | CVE-2026-39515 | 2026-04-21 | Advisory |
| High 8.1 | <= 1.4.89 | 1.4.90 | CVE-2025-10494 | 2025-10-07 | Advisory |
| Medium 5.3 | <= 1.4.80 | 1.4.81 | CVE-2025-54691 | 2025-07-30 | Advisory |
| Critical 9.8 | <= 1.4.71 | 1.4.72 | CVE-2025-32654 | 2025-04-09 | Advisory |
| High 8.8 | <= 1.4.64 | 1.4.65 | CVE-2025-2807 | 2025-04-07 | Advisory |
| Medium 5.4 | <= 1.4.63 | 1.4.64 | CVE-2025-2808 | 2025-04-07 | Advisory |
| Medium 4.3 | <= 1.4.66 | 1.4.67 | CVE-2025-3437 | 2025-04-07 | Advisory |
| High 8.8 | <= 1.4.71 | 1.4.72 | CVE-2025-32142 | 2025-04-04 | Advisory |
| Medium 6.4 | <= 1.4.71 | 1.4.72 | CVE-2025-32170 | 2025-04-04 | Advisory |
| Medium 4.3 | <= 1.4.57 | 1.4.58 | CVE-2024-13737 | 2025-03-21 | Advisory |
| Medium 5.4 | <= 1.4.43 | 1.4.44 | CVE-2024-10970 | 2025-01-15 | Advisory |
| Medium 5.3 | <= 1.4.9 | 1.4.11 | CVE-2024-5545 | 2024-07-01 | Advisory |
| Medium 6.1 | <= 1.4.6 | 1.4.7 | CVE-2023-46208 | 2023-10-19 | Advisory |
| High 7.2 | <= 1.4.6 | 1.4.7 | CVE-2023-46207 | 2023-10-19 | Advisory |
| Medium 5.4 | <= 1.4.5 | 1.4.6 | CVE-2022-38716 | 2023-04-19 | Advisory |
| Critical 9.8 | <= 1.4.3 | 1.4.4 | CVE-2022-3989 | 2022-11-21 | Advisory |
| Medium 6.1 | < 1.4.1 | 1.4.1 | CVE-2019-17229 | 2019-09-20 | Advisory |
| Medium 6.5 | < 1.4.1 | 1.4.1 | CVE-2019-17228 | 2019-09-20 | Advisory |
Check if a site is affected
Enter a site address to see which version of Motors – Car Dealership & Classified Listings Plugin and other plugins it runs, and whether they match a known vulnerability.
Questions
Is the Motors – Car Dealership & Classified Listings Plugin plugin safe to use?
All 41 known issues are fixed in current versions (1.4.129 or later). Keeping it updated is what matters.
How do I check which version of Motors – Car Dealership & Classified Listings Plugin my site runs?
In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.
How do I fix a vulnerable plugin?
Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.