CVE-2026-104399: CWE-201 Insertion of Sensitive Information Into Sent Data in StylemixThemes Motors

This vulnerability, identified as CWE-201 (Insertion of Sensitive Information Into Sent Data), exists in StylemixThemes Motors up to version 1.4.124. It allows an attacker to retrieve embedded sensitive data by exploiting the way sensitive information is inserted into data sent by the application. The CVSS 4.0 vector indicates the attack can be performed remotely without authentication or user interaction, with low complexity and no impact on confidentiality, integrity, or availability beyond the exposure of sensitive data.

The vulnerability enables unauthorized retrieval of embedded sensitive information from the application data sent by StylemixThemes Motors. This could lead to exposure of sensitive data, potentially compromising user privacy or security depending on the nature of the data inserted. There is no indication of direct impact on system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is available at this time. Users should monitor vendor communications for updates and consider restricting exposure of sensitive data in transmitted content as a precaution.