CVE-2025-54691: Stylemix Motors, заобикаляне на вход и права

Описание

Оригинално описание

Authorization Bypass Through User-Controlled Key vulnerability in Stylemix Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through <= 1.4.80.

Засегнати продукти

• Stylemix Motors: до 1.4.80

Вид слабост

• CWE-639 Authorization Bypass Through User-Controlled Key

История

Други уязвимости в Stylemix Motors

• 6.5CVE-2026-66693
• 8.1CVE-2025-32654
• 6.5CVE-2025-32170
• 8.8CVE-2025-32142

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-54691
• https://nvd.nist.gov/vuln/detail/CVE-2025-54691
• https://patchstack.com/database/Wordpress/Plugin/motors-car-dealership-classified-listings/vulnerability/wordpress-motors-plugin-plugin-1-4-80-insecure-direct-object-references-idor-vulnerability?_s_id=cve