CVE-2026-93950

Summary

This vulnerability allows attackers to bypass authorization controls in StylemixThemes Motors, enabling them to access restricted functionality without proper authentication. The flaw stems from incorrectly configured access control security levels that fail to properly validate user permissions.

Exploitability

Exploitation is relatively straightforward with no special preconditions required, as the missing authorization check allows immediate access to protected resources once an attacker identifies the vulnerable endpoints.

Blast radius

The impact could be significant across all Motors versions up to 1.4.108, potentially allowing unauthorized users to perform actions they shouldn't be able to, such as modifying vehicle listings or accessing sensitive administrative functions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Motors version 1.4.109 or later to receive the authorization fix.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.