{"id":"CVE-2026-104399","title":"Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Motors: from n/a through 1.4.124.","summary":"Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Motors: from n/a through 1.4.124.","severity":"medium","cvss":6.9,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","cwe":["CWE-201"],"vendor":"StylemixThemes","product":"motors-car-dealership-classified-listings","affected":["motors-car-dealership-classified-listings >= n/a <= 1.4.124"],"published":"2026-10-06","updated":"2026-10-06","sourceUpdated":"2026-10-06T11:17:14.667","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-104399","references":[{"url":"https://patchstack.com/database/wordpress/plugin/motors-car-dealership-classified-listings/vulnerability/wordpress-motors-plugin-1-4-124-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-06T10:08:51.212518Z"},"cvssSource":"cna","ingestedAt":"2026-10-06T08:50:17.460Z","slug":"CVE-2026-104399","body":"## Overview\n\nInsertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Motors: from n/a through 1.4.124.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":38,"depthScoreParts":{"impact":38,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}