CVE-2026-27433

17th percentile — higher than 17% of all known CVEs

The Motors plugin versions up to 5.6.80 contain an unauthenticated broken access control vulnerability. An attacker without authentication can bypass security measures and gain unauthorized access to functions or data.

The risk involves unauthorized access to sensitive functions or data without requiring login, potentially leading to confidentiality and integrity breaches.

Immediately update the Motors plugin to version 5.6.81 or later, which fixes this vulnerability. Also review the access control configuration in the system.