Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.80 - Missing Authorization

2026-06-30 00:00

Rafie Muhammad

Strategic Overview

Status

Unpatched

Affected ThemeMotors - Car Dealer, Rental & Listing WordPress theme

Affected Version<= 5.6.80

CVSS5.3Medium

CVECVE-2026-27433

View all Motors - Car Dealer, Rental & Listing WordPress theme vulnerabilities

Vulnerability Overview

The Motors - Car Dealer, Rental & Listing WordPress theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 5.6.80. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Technical Analysis

REMEDIATION: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement. --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

External References

https://www.cve.org/CVERecord?id=CVE-2026-27433 https://www.wordfence.com/threat-intel/vulnerabilities/id/f00763e2-f5a0-495b-949d-0012f278d4ed