Motors - Car Dealer, Rental & Listing WordPress theme

Motors - Car Dealer, Rental & Listing WordPress theme has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Code Injection, Unverified Password Change.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

4 independent researchers contributed these findings, one record each.

01234567891002.05.2025Today02.05.20257.3Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 02.05.202519.05.20259.8Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover CVSS 9.8 · 19.05.202521.10.20258.8Motors <= 5.6.82 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation CVSS 8.8 · 21.10.202530.06.20265.3Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.80 - Missing Authorization CVSS 5.3 · 30.06.2026

Strategic Overview

Avg CVSSHigh
7.8/ 10
Patch Coverage75%
Open

1

Fixed

3

Get automatic notifications for all Motors - Car Dealer, Rental & Listing WordPress theme vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-27433

Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.80 - Missing Authorization

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C