CVE-2026-104399: WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability

Q: What access does an attacker need to exploit this issue?

The available CVSS vector indicates that exploitation is network-accessible, requires no privileges, no user interaction, and has low attack complexity.

Q: What is the likely impact if exploitation succeeds?

The stated impact is disclosure of sensitive information, with low impact to confidentiality. The available data does not indicate integrity or availability impact.

Q: Which Motors versions are affected?

Motors versions through 1.4.124 are affected. The earliest affected version is not specified.

Published Oct 6, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data.

This issue affects Motors: from n/a through 1.4.124.

Affected Software

1 affected component

StylemixThemes Motors<=1.4.124

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Motors plugin to a version that resolves this vulnerability.
Fixed in 1.4.125

Event History

Oct 6, 2026

CVE Published

via MITRE·08:40 AM

Data Sourced

via MITRE·08:40 AM

RemedyDescriptionWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The available CVSS vector indicates that exploitation is network-accessible, requires no privileges, no user interaction, and has low attack complexity.

What is the likely impact if exploitation succeeds?