This vulnerability (CVE-2026-54812) in StylemixThemes Motors is an improper neutralization of special elements used in an SQL command (CWE-89), resulting in blind SQL injection. It affects versions up to 1.4.109 inclusive. The CVSS 3.1 base score is 9.3, indicating a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and scope changed. The impact is high confidentiality loss and low availability impact. No official fix or patch has been published as of the data provided.

An attacker can exploit this vulnerability remotely without authentication or user interaction to perform blind SQL injection attacks. This can lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is not indicated. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor vendor communications for updates. Until a patch is released, consider applying application-level mitigations such as input validation and use of web application firewalls to detect and block SQL injection attempts.