Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content and User Biographical Info in all versions up to, and including, 1.4.112 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
#CVE-2026-13114 – Stored #XSS in Motors #WordPress plugin. Unauthenticated injection via comments/bio. #CVSS 7.2. No patch yet. Harden now. #CVEAlert #developers #git #gitlab #github #sysadmin #100daysofcode #100daysofcodechallange #infosec
Post summary
The post alerts to CVE-2026-13114, a stored XSS vulnerability in the Motors WordPress plugin, with a CVSS score of 7.2 and no patch yet available.
🚨 HIGH: CVE-2026-13114 (CVSS 7.2) - Motors WordPress plugin vulnerable to Stored XSS. Unauthenticated attackers can inject malicious scripts via comments & user bios. Affects versions ≤1.4.112. Update immediately. #CVE #Vulnerability #PatchNow https://t.co/mppl9F4oxc
Post summary
High‑severity CVE‑2026‑13114 exposes Stored XSS in Motors WordPress plugin; affected versions are ≤1.4.112 and users should update immediately.