The vulnerability CVE-2025-54691 in Stylemix Motors (motors-car-dealership-classified-listings) allows an attacker to bypass authorization controls due to misconfigured access control security levels. This is achieved through manipulation of a user-controlled key, enabling unauthorized access. The affected versions include all versions up to 1.4.80. The CVSS 3.1 base score is 5.3 (medium), with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to confidentiality loss. No patch or vendor advisory is currently available.

An attacker can bypass authorization controls without authentication or user interaction, potentially gaining unauthorized access to data with limited confidentiality impact. There is no reported impact on integrity or availability. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.