Lucene search
+L

109 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.19 views

EUVD-2025-10319

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00836EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.8 views

CVE-2025-54691 WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Stylemix Motors allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Motors: from n/a through 1.4.80...

5.3CVSS7.1AI score0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.20 views

CVE-2025-54691 WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Stylemix Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through = 1.4.80...

5.3CVSS0.00306EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.20 views

WordPress plugin Motors 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/06 11:41 a.m.20 views

CVE-2025-47586 WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

9CVSS0.00582EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:55 a.m.11 views

CVE-2024-5545

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stmeditdeleteusercar function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to...

5.3CVSS5.5AI score0.0033EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:02 a.m.8 views

CVE-2019-17229

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress has multiple stored XSS issues...

6.1CVSS6AI score0.01364EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/20 12:00 a.m.17 views

WordPress plugin Motors 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS9.3AI score0.18673EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2025/05/03 12:00 a.m.11 views

WordPress plugin The Motors - Car Dealer, Rental & Listing 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

7.3CVSS8.3AI score0.00486EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/04/11 8:43 a.m.31 views

CVE-2025-32654 WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Stylemix Motors motors-car-dealership-classified-listings allows PHP Local File Inclusion.This issue affects Motors: from n/a through = 1.4.71...

8.1CVSS0.00889EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/11 8:43 a.m.66 views

CVE-2025-32654

CVE-2025-32654 affects Motors – Car Dealership & Classified Listings Plugin (WordPress) and is an unauthenticated Local File Inclusion (LFI) via improper control of the filename in PHP include/require. Affected versions are Motors

8.1CVSS7.2AI score0.00889EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/11 12:00 a.m.9 views

WordPress plugin Motors 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS8.3AI score0.00889EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 9:46 a.m.31 views

CVE-2025-2807

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check in the mvlsetupwizardinstallplugin function in all versions up to, and including, 1.4.64. This makes it possible for authenticated...

8.8CVSS7.5AI score0.00836EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2025/04/09 4:11 p.m.12 views

WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Motors versions = 1.4.71...

8.1CVSS8.4AI score0.00889EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
added 2025/04/08 10:24 a.m.442 views

Exploit for Missing Authorization in Stylemixthemes Motors_-_Car_Dealer\,_Classifieds_\&_Listing

CVE-2025-2807: Motors Plugin Exploit By: Nxploited | Khal...

8.8CVSS8.6AI score0.00836EPSS
SaveExploits1
OSV
OSV
added 2025/04/08 10:15 a.m.10 views

CVE-2025-3437

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in the ajaxactions.php file in all versions up to, and including, 1.4.66. This makes it possible for authenticate...

4.3CVSS7.4AI score0.00293EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/08 10:15 a.m.25 views

CVE-2025-3437

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in the ajaxactions.php file in all versions up to, and including, 1.4.66. This makes it possible for authenticate...

4.3CVSS0.00293EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/08 10:15 a.m.7 views

CVE-2025-2808

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Phone Number parameter in all versions up to, and including, 1.4.63 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

5.4CVSS7.4AI score0.00216EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/08 10:15 a.m.10 views

CVE-2025-2807

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check in the mvlsetupwizardinstallplugin function in all versions up to, and including, 1.4.64. This makes it possible for authenticated...

8.8CVSS6.4AI score0.00836EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/08 9:21 a.m.9 views

CVE-2025-3437 Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in the ajaxactions.php file in all versions up to, and including, 1.4.66. This makes it possible for authenticate...

4.3CVSS7AI score0.00293EPSS
SaveExploits0References3
Rows per page
Query Builder