PT-2026-51279 · WordPress · Motors

Mustafa Ahmed · Published 2026-06-22 · Updated 2026-06-22 · CVE-2026-7859

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Motors WordPress plugin versions prior to 1.4.110

Description Lack of proper authorization and Cross-Site Request Forgery (CSRF) checks on an AJAX action allows unauthenticated attackers to modify arbitrary post metadata. This includes the gallery, featured image and, on WooCommerce sites, product prices.

Recommendations Update to version 1.4.110 or later.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-7859

Affected Products

Motors

References · 3

• 🔥 https://wpscan.com/vulnerability/3c11e490-92d8-46e1-a0ae-7c4c703ac411 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7859 · Security Note
• https://twitter.com/VulmonFeeds/status/2068951629668241429 · Twitter Post