These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A Missing Authorization vulnerability exists in the WordPress Motors theme, version 1.4.108 and earlier. This issue allows attackers to exploit incorrectly configured access control security levels. The vulnerability has a CVSS score of 7.5 and is classified as HIGH severity. Defenders should assess their exposure and take necessary actions to mitigate the vulnerability. The CVE record and source item pro [truncated]
A Cross Site Scripting (XSS) vulnerability exists in the WordPress MasterStudy LMS plugin versions up to 3.7.52. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability arises from improper neutralization of input during web page generation. Defenders responsible for WordPress installations using the MasterStudy LMS plugin should asses [truncated]
CVE-2026-97307 debrief based on the supplied source corpus. The CVE record was published on 2026-10-04T11:16:33.073Z and has not been modified since then. This vulnerability affects the Cost Calculator Builder plugin for WordPress, allowing retrieval of embedded sensitive data. Defenders should assess exposure and prioritize verification and remediation efforts. The vulnerability has a CVSS score of 7.5 a [truncated]
The CVE record for CVE-2026-28145 was published on 2026-07-31T14:16:49.967Z and has not been modified since then. The NVD entry is currently being reviewed. This debrief is based on the supplied source corpus from Patchstack and the NVD. The vulnerability, Insufficient Verification of Data Authenticity in MasterStudy LMS, allows for user state manipulation and affects versions from n/a through 3.7.39. Sec [truncated]
A Missing Authorization vulnerability in the StylemixThemes Motors theme for WordPress allows attackers to exploit incorrectly configured access control security levels. This issue affects Motors versions from n/a before 5.6.85. The vulnerability could lead to potential unauthorized actions on WordPress sites using vulnerable Motors theme versions. Defenders should verify and update the Motors theme to ve [truncated]
CVE-2025-68063 is a high-severity contributor local file inclusion vulnerability in the Splash - Sport Club WordPress Theme for Basketball, Football, Hockey versions <= 4.4.3. This vulnerability allows for potential unauthorized access to sensitive files and possible data breaches due to local file inclusion. Defenders of WordPress installations using affected versions should assess exposure and prioritiz [truncated]
CVE-2026-54828 is a high-severity vulnerability in the Motors plugin, affecting versions up to 1.4.109. It allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized actions.
A SQL injection vulnerability exists in the StylemixThemes Motors plugin for WordPress, affecting versions from n/a through 1.4.109. This issue allows for Blind SQL Injection, posing a critical risk to affected systems. The vulnerability has a CVSS score of 9.3 and is classified as CRITICAL. Defenders should assess exposure and prioritize patching or mitigation to prevent potential SQL injection attacks. [truncated]
The CVE-2026-54814 vulnerability is a PHP Remote File Inclusion issue in the Motors plugin, affecting versions up to 1.4.109. This vulnerability allows attackers to include local or remote files, potentially leading to code execution. The vulnerability has a CVSS score of 8.1, indicating high severity. Users of the Motors plugin should update to a patched version as soon as possible. The vulnerability was [truncated]
A SQL injection vulnerability exists in MasterStudy LMS versions up to 3.7.25, allowing subscribers to inject malicious SQL code. This issue has been publicly disclosed and is considered high severity with a CVSS score of 8.5.
A Subscriber Broken Access Control vulnerability exists in the Motors plugin for WordPress versions less than 1.4.107. This vulnerability has been assigned a CVSS score of 6.5, indicating a MEDIUM severity level. The vulnerability allows an attacker to bypass access controls, potentially leading to unauthorized actions. The Common Weakness Enumeration (CWE) associated with this vulnerability is CWE-862.
A Missing Authorization vulnerability was discovered in StylemixThemes MasterStudy LMS Pro, affecting versions from n/a before 4.7.16. This vulnerability allows attackers to access functionality not properly constrained by Access Control Lists (ACLs). The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 6.5, indicating a Medium severity level.
