CVE-2026-116617 | Stylemix Motors Plugin up to 1.4.128 on WordPress User Extra Fields stm_save_user_extra_fields stm_dealer_logo_path unrestricted upload

November 5, 2026 Yanac

A vulnerability, which was classified as critical, was found in Stylemix Motors Plugin up to 1.4.128 on WordPress. This affects the function stm_save_user_extra_fields of the component User Extra Fields. Executing a manipulation of the argument stm_dealer_logo_path can lead to unrestricted upload.

This vulnerability is handled as CVE-2026-116617. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More