Lucene search
+L

109 matches found

CNNVD
CNNVD
added 2025/04/04 12:00 a.m.6 views

WordPress plugin Motors 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS8.6AI score0.00728EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/24 3:03 a.m.33 views

CVE-2024-13737

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the motorscreatetemplate and motorsdeletetemplate functions in all versions up to, and including, 1.4.57. This makes it possible for...

4.3CVSS6.7AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/22 3:15 a.m.12 views

CVE-2024-13737

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the motorscreatetemplate and motorsdeletetemplate functions in all versions up to, and including, 1.4.57. This makes it possible for...

4.3CVSS0.00298EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/03/22 2:22 a.m.7 views

CVE-2024-13737 Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the motorscreatetemplate and motorsdeletetemplate functions in all versions up to, and including, 1.4.57. This makes it possible for...

4.3CVSS6.8AI score0.00298EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/03/22 2:22 a.m.21 views

CVE-2024-13737 Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on the motorscreatetemplate and motorsdeletetemplate functions in all versions up to, and including, 1.4.57. This makes it possible for...

4.3CVSS0.00298EPSS
SaveExploits0References4
CVE
CVE
added 2025/03/22 2:22 a.m.61 views

CVE-2024-13737

The CVE-2024-13737 entry concerns the Motors – Car Dealer, Classifieds & Listing WordPress plugin (versions up to and including 1.4.57). Root cause: missing capability checks in motors_create_template and motors_delete_template, allowing authenticated users with Subscriber+ privileges to delete a...

4.3CVSS6.7AI score0.00298EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2025/03/22 12:00 a.m.11 views

WordPress plugin Motors – Car Dealer, Classifieds & Listing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.6AI score0.00298EPSS
SaveExploits0References5
NVD
NVD
added 2025/01/16 2:15 a.m.9 views

CVE-2024-10970

The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.43. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

5.4CVSS0.00328EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/16 2:15 a.m.7 views

CVE-2024-10970

The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.43. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

5.4CVSS6.1AI score0.00328EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/16 1:49 a.m.9 views

CVE-2024-10970 Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title

The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.43. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

5.4CVSS7.3AI score0.00328EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/16 1:49 a.m.22 views

CVE-2024-10970 Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title

The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.43. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

5.4CVSS0.00328EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/16 12:00 a.m.5 views

WordPress plugin Motors 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code injection vulnerabilit...

5.4CVSS8.9AI score0.00328EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/15 12:14 p.m.6 views

WordPress Motors plugin <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution via Custom Title vulnerability discovered by WordFence in WordPress Plugin Motors versions = 1.4.43...

5.4CVSS7.1AI score0.00328EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/07/02 8:15 a.m.33 views

CVE-2024-5545

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stmeditdeleteusercar function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to...

5.3CVSS0.0033EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/02 8:15 a.m.8 views

CVE-2024-5545

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stmeditdeleteusercar function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to...

5.3CVSS5.9AI score0.0033EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/07/02 8:15 a.m.6 views

CVE-2024-5545

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stmeditdeleteusercar function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to...

5.3CVSS6AI score0.0033EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/07/02 2:01 a.m.12 views

WordPress Motors plugin <= 1.4.9 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Krzysztof Zając in WordPress Plugin Motors versions = 1.4.9...

5.3CVSS7AI score0.0033EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/02 12:00 a.m.8 views

WordPress plugin Motors security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.4AI score0.0033EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/11/13 2:51 a.m.28 views

CVE-2023-46207 WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer, Classifieds & Listing: from n/a through 1.4.6...

4.1CVSS7.8AI score0.00506EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/27 9:15 p.m.24 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin = 1.4.6 versions...

5.8CVSS6AI score0.00331EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder