39556 matches found
WordPress Motors Car Dealership & Classified Listings plugin < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media vulnerability
Unauthenticated Post-Meta Write via stmajaxaddacarmedia vulnerability discovered by Mustafa Ahmed in WordPress Plugin Motors versions 1.4.110...
CVE-2026-48880
creationtimestamp| type| source ---|---|--- 2026-06-22 07:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moudpon4vj2i...
EUVD-2026-38214
The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices...
CVE-2026-7859 Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media
The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices...
CVE-2026-7859
The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary post metadata, such as the gallery, featured image and, on WooCommerce sites, product prices...
CVE-2026-7859
CVE-2026-7859 affects the Motors WordPress plugin before 1.4.110. The vulnerability arises from missing proper authorisation and CSRF checks on an AJAX action, allowing unauthenticated attackers to modify arbitrary post metadata (e.g., gallery, featured image) and, on WooCommerce sites, product p...
CVE-2026-8918
creationtimestamp| type| source ---|---|--- 2026-06-22 05:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mou6me7odi2j...
CVE-2026-35223
creationtimestamp| type| source ---|---|--- 2026-06-22 05:16:43+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou4zrin3q22...
CVE-2026-35222
creationtimestamp| type| source ---|---|--- 2026-06-22 05:01:52+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou477ypkc2z...
CVE-2026-48687
creationtimestamp| type| source ---|---|--- 2026-06-22 05:01:37+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou46rwq6m2f...
CVE-2026-9475
creationtimestamp| type| source ---|---|--- 2026-06-22 04:31:34+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou2j2f34m2y...
CVE-2026-9458
creationtimestamp| type| source ---|---|--- 2026-06-22 04:17:05+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzp5h7px2b...
CVE-2026-9457
creationtimestamp| type| source ---|---|--- 2026-06-22 04:16:43+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzoies3n2r...
CVE-2026-9456
creationtimestamp| type| source ---|---|--- 2026-06-22 04:16:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzobguut2b...
CVE-2026-9387
creationtimestamp| type| source ---|---|--- 2026-06-22 02:47:03+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motuo2fcjb2n...
CVE-2026-9386
creationtimestamp| type| source ---|---|--- 2026-06-22 02:46:57+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motuntmise2z...
CVE-2026-12815
creationtimestamp| type| source ---|---|--- 2026-06-22 02:16:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motsydhj222t...
CVE-2026-12810
creationtimestamp| type| source ---|---|--- 2026-06-22 02:02:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mots6qzvg62h...
CVE-2026-56265
creationtimestamp| type| source ---|---|--- 2026-06-22 00:39:16+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnjm7sut2j 2026-06-27 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpceht2wcr2h...