{"id":"CVE-2026-93950","published":"2026-10-10T08:17:07.307","lastModified":"2026-10-13T13:28:15.717","description":"Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/theme/motors/vulnerability/wordpress-motors-theme-1-4-108-broken-access-control-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to bypass authorization controls in StylemixThemes Motors, enabling them to access restricted functionality without proper authentication. The flaw stems from incorrectly configured access control security levels that fail to properly validate user permissions.","exploitability":"Exploitation is relatively straightforward with no special preconditions required, as the missing authorization check allows immediate access to protected resources once an attacker identifies the vulnerable endpoints.","blast_radius":"The impact could be significant across all Motors versions up to 1.4.108, potentially allowing unauthorized users to perform actions they shouldn't be able to, such as modifying vehicle listings or accessing sensitive administrative functions.","remediation":"Upgrade to Motors version 1.4.109 or later to receive the authorization fix.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["authorization","access-control","web-application","vulnerability"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:59:39.256Z"}}