WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Motors – Car Dealership & Classified Listings Plugin

Manage classified listings with WordPress, and allow users to post classified listings directly to your website.

34Reported vulnerabilities
9.8Highest CVSS score
1.4.115Latest version
9,000+Active installs

What to do now

Update Motors – Car Dealership & Classified Listings Plugin to 1.4.125 or later. 33 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-3989 High 8.8 1.1% Before 1.4.4 1.4.4 December 12, 2022
CVE-2019-17228 Medium 6.5 1.2% 1.4.0 and earlier 1.4.1 February 24, 2020
CVE-2019-17229 Medium 6.1 1.4% 1.4.0 and earlier 1.4.1 February 24, 2020
CVE-2025-32654 Critical 9.8 0.9% 1.4.71 and earlier 1.4.72 April 9, 2025
CVE-2025-2807 High 8.8 0.9% Before 1.4.65 1.4.65 April 8, 2025
CVE-2025-32142 High 8.8 0.8% 1.4.71 and earlier 1.4.72 April 4, 2025
CVE-2026-3892 High 8.1 0.5% 1.4.107 and earlier 1.4.108 May 13, 2026
CVE-2025-10494 High 8.1 0.5% 1.4.89 and earlier 1.4.90 October 7, 2025
CVE-2026-54814 High 7.5 0.6% 1.4.109 and earlier 1.4.110 June 17, 2026
CVE-2026-6806 High 7.5 0.3% 0 to 1.4.109 (inclusive) 1.4.110 September 30, 2026
CVE-2026-54812 High 7.5 0.4% 1.4.109 and earlier 1.4.110 June 17, 2026
CVE-2026-13114 High 7.2 0.4% 0 to 1.4.112 (inclusive) 1.4.113 July 11, 2026
CVE-2023-46207 High 7.2 0.5% 1.4.6 and earlier 1.4.7 October 19, 2023
CVE-2025-32170 Medium 6.4 0.4% 1.4.71 and earlier 1.4.72 April 4, 2025
CVE-2026-96563 Medium 6.4 0.2% 0 to 1.4.123 (inclusive) — October 10, 2026
CVE-2026-91022 Medium 6.4 0.2% 1.4.123 and earlier 1.4.124 September 30, 2026
CVE-2023-46208 Medium 6.1 0.3% 1.4.6 and earlier 1.4.7 October 19, 2023
CVE-2024-10970 Medium 5.4 0.3% Before 1.4.44 1.4.44 January 16, 2025
CVE-2026-104399 Medium 5.3 0.4% 1.4.124 and earlier 1.4.125 October 5, 2026
CVE-2026-16750 Medium 5.3 0.2% 1.4.120 and earlier 1.4.121 September 17, 2026
CVE-2026-91016 Medium 5.3 0.3% 1.4.120 and earlier 1.4.121 September 15, 2026
CVE-2026-54828 Medium 5.3 0.3% 1.4.109 and earlier 1.4.110 June 17, 2026
CVE-2025-54691 Medium 5.3 0.3% 1.4.80 and earlier 1.4.81 July 30, 2025
CVE-2025-2808 Medium 5.4 0.2% Before 1.4.64 1.4.64 April 8, 2025
CVE-2024-5545 Medium 5.3 0.3% Before 1.4.11 1.4.11 July 2, 2024
CVE-2022-38716 Medium 5.4 0.2% 1.4.5 and earlier 1.4.6 April 19, 2023
CVE-2026-91023 Medium 4.3 0.1% 1.4.123 and earlier 1.4.124 September 30, 2026
CVE-2026-66693 Medium 4.3 0.3% 1.4.113 and earlier 1.4.114 August 10, 2026
CVE-2026-12435 Medium 4.3 0.4% 0 to 1.4.111 (inclusive) 1.4.112 July 1, 2026
CVE-2026-7859 Medium 4.3 0.2% Before 1.4.110 1.4.110 June 22, 2026
CVE-2026-1934 Medium 4.3 0.2% 0 to 1.4.103 (inclusive) 1.4.104 May 12, 2026
CVE-2026-39515 Medium 4.3 0.4% Before 1.4.107 1.4.107 April 21, 2026
CVE-2025-3437 Medium 4.3 0.3% Before 1.4.67 1.4.67 April 8, 2025
CVE-2024-13737 Medium 4.3 0.3% Before 1.4.58 1.4.58 March 22, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.