medium5.3
CVE-2026-7859
The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to…
Impact
The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices.
Affected products
| Product | Affected versions |
|---|---|
| Motors WordPress Plugin | before 1.4.110 |
Versions were read from the advisory text. No structured product data has been published for this record yet.