Skip to content
PluginCanary

Motors - Car Dealership & Classified Listings Plugin

by Stylemix · 9,000+ active installs · Checked 3 Nov 2026
Healthy9 Warnings

Healthy: vulnerability published 27 Oct 2026, fixed in 1.4.127.

81/ 100 Canary Score
Sub-scores for Motors - Car Dealership & Classified Listings Plugin
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 1.4.127. Update to version 1.4.127 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 1.4.125. Update to version 1.4.125 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 1.4.125. Update to version 1.4.125 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 1.4.124. Update to version 1.4.124 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 1.4.124. Update to version 1.4.124 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 29 Sep 2026, fixed in 1.4.110. Update to version 1.4.110 or later.29 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 1.4.121. Update to version 1.4.121 or later.17 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 15 Sep 2026, fixed in 1.4.121. Update to version 1.4.121 or later.15 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 10 Aug 2026, fixed in 1.4.114. Update to version 1.4.114 or later.10 Aug 2026Evidence
  • InfoSEC-328 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
stylemix23 Jan 2017 to 30 Oct 2026, 315 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
99
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for Motors - Car Dealership & Classified Listings Plugin
Q1 20240
Q2 20244
Q3 202413
Q4 202424
Q1 202517
Q2 202512
Q3 202513
Q4 20259
Q1 20268
Q2 20265
Q3 202612
Q4 20265

Last release 30 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Motors – Car Dealership & Classified Listings Plugin <= 1.4.126 - Unauthenticated SQL Injection7.5<= 1.4.1261.4.1270
9 Oct 2026Motors <= 1.4.124 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter6.4<= 1.4.1241.4.1250
5 Oct 2026Motors – Car Dealership & Classified Listings Plugin <= 1.4.124 - Unauthenticated Information Exposure5.3<= 1.4.1241.4.1250
30 Sep 2026Motors – Car Dealership & Classified Listings <= 1.4.123 - Missing Authorization4.3<= 1.4.1231.4.1240
30 Sep 2026Motors <= 1.4.123 - Authenticated (Listing Manager+) Stored Cross-Site Scripting6.4<= 1.4.1231.4.1240
29 Sep 2026Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters7.5<= 1.4.1091.4.1100
17 Sep 2026Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure5.3<= 1.4.1201.4.1210
15 Sep 2026Motors <= 1.4.120 - Unauthenticated Insecure Direct Object Reference5.3<= 1.4.1201.4.1210
10 Aug 2026Motors – Car Dealership & Classified Listings Plugin <= 1.4.113 - Missing Authorization4.3<= 1.4.1131.4.1140
10 Jul 2026Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info7.2<= 1.4.1121.4.1130
30 Jun 2026Motors <= 1.4.111 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'stm_mark_as_sold_car' Parameter4.3<= 1.4.1111.4.1120
22 Jun 2026Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Cross-Site Request Forgery4.3< 1.4.1101.4.1100
17 Jun 2026Motors – Car Dealership & Classified Listings Plugin <= 1.4.109 - Authenticated (Subscriber+) Local File Inclusion7.5<= 1.4.1091.4.1100
17 Jun 2026Motors – Car Dealership & Classified Listings Plugin <= 1.4.109 - Missing Authorization5.3<= 1.4.1091.4.1100
17 Jun 2026Motors – Car Dealership & Classified Listings Plugin <= 1.4.109 - Unauthenticated SQL Injection7.5<= 1.4.1091.4.1100
13 May 2026Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter8.1<= 1.4.1071.4.1080
11 May 2026Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter4.3<= 1.4.1031.4.1040
21 Apr 2026Motors – Car Dealership & Classified Listings Plugin < 1.4.107 - Missing Authorization4.3< 1.4.1071.4.1070
7 Oct 2025Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion8.1<= 1.4.891.4.900
30 Jul 2025Motors <= 1.4.80 - Unauthenticated Insecure Direct Object Reference5.3<= 1.4.801.4.810
9 Apr 2025Motors <= 1.4.71 - Unauthenticated Local File Inclusion9.8<= 1.4.711.4.7228
7 Apr 2025Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation8.8<= 1.4.641.4.650
7 Apr 2025Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting5.4<= 1.4.631.4.640
7 Apr 2025Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up4.3<= 1.4.661.4.671
4 Apr 2025Motors <= 1.4.71 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.711.4.7233

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.5 from 79 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star65
4 star5
3 star0
2 star2
1 star7

Momentum

9,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Motors - Car Dealership & Classified Listings Plugin
4 May 2026305
11 May 2026695
18 May 20262,782
25 May 20262,495
1 Jun 2026832
8 Jun 2026627
15 Jun 20264,550
22 Jun 20261,095
29 Jun 20262,844
6 Jul 20261,277
13 Jul 20261,265
20 Jul 2026746
27 Jul 20262,507
3 Aug 2026988
10 Aug 20263,113
17 Aug 20261,021
24 Aug 20264,250
31 Aug 20265,830
7 Sep 20265,074
14 Sep 20263,343
21 Sep 20261,052
28 Sep 20263,158
5 Oct 20263,627
12 Oct 2026789
19 Oct 20262,716
26 Oct 20265,603
2 Nov 2026274

Weekly downloads over the last 4 weeks are 1% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Job BoardScore 92 · 10,000+HireZoot - Job Listings, Career Page & Recruitment ToolScore 91 · 30,000+HivePress MessagesScore 91 · 7,000+HivePress ReviewsScore 91 · 7,000+HivePress FavoritesScore 91 · 7,000+

Facts

Version1.4.129
AuthorStylemix
Added18 Jan 2017
Last updated30 Oct 2026
Active installs9,000+
Requires WordPress4.6
Tested up to7.0.8
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagslistings, car dealer, classifieds, auto listing, classified ads

Other plugins by this author: Cost Calculator Builder, MasterStudy LMS WordPress Plugin - for Online Courses and Education, Pearl - Header Builder, Directory Listings WordPress plugin - uListing, Motors VIN Decoder, MasterStudy LMS Divi Modules, Checkout Custom Fields Builder for WooCommerce

Questions

Is Motors - Car Dealership & Classified Listings Plugin still maintained?

Motors - Car Dealership & Classified Listings Plugin was last updated on 30 Oct 2026. Its Canary status is Healthy.

Is Motors - Car Dealership & Classified Listings Plugin safe?

Motors - Car Dealership & Classified Listings Plugin has no open unpatched vulnerabilities on record. 28 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Motors - Car Dealership & Classified Listings Plugin?

The wordpress.org author is Stylemix. Recent committers: stylemix, plugin-master. We have recorded no ownership change.

What can I use instead of Motors - Car Dealership & Classified Listings Plugin?

Plugins in the same category with a higher Canary Score: Simple Job Board, HireZoot - Job Listings, Career Page & Recruitment Tool, HivePress Messages, HivePress Reviews, HivePress Favorites.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue