Design/Logic Flaw

2020-02-2419:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.

CPENameOperatorVersion
motors_-_car_dealer\\,_classifieds_\\&_listingle1.4.0

CPE	Name	Operator	Version
	motors_-_car_dealer\\,_classifieds_\\&_listing	le	1.4.0

References

blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-motors-car-dealer-classified-ads-plugin/

wordpress.org/plugins/motors-car-dealership-classified-listings/

wpvulndb.com/vulnerabilities/9884