CVE-2026-93950: WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability
Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability is rated with network attack vector, low attack complexity, no privileges required, and no user interaction required. This indicates it may be exploitable remotely without an authenticated WordPress account.
What is the likely security impact?
The reported impact is integrity-only: it may allow unauthorized modification of data or actions protected by incorrectly configured access controls. No confidentiality or availability impact is specified.
Which installations are affected?
StylemixThemes Motors versions through 1.4.108 are affected. The available information does not state whether a particular default configuration, feature, or endpoint must be enabled.