A critical SQL Injection vulnerability (CVE-2026-115964) exists in StylemixThemes Motors plugin up to version 1.4.126. This vulnerability allows an unauthenticated attacker to perform Blind SQL Injection, potentially leading to high confidentiality impact and partial denial of service.