381 matches found
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export
includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...
Blackash-CVE-2025-4322
CVE-2025-4322 : Escalation dei Privilegi non Autenticata tramite Aggiornamento Password "Account Takeover 🔥" Descrizione : Il tema Motors per WordPress è vulnerabile all'escalation dei privilegi tramite account takeover in tutte le versioni fino alla 5.6.67 inclusa. Ciò è dovuto al fatto che il...
CVE-2025-4322
🔐 CVE-2025-4322 – Motors = 5.6.67 - Escalation di Privilegi Non Autenticata tramite Aggiornamento Password/Account Takeover 📌 Informazioni sul Tema Plugin : Motors = 5.6.67 - Escalation di Privilegi Non Autenticata tramite Aggiornamento Password/Account Takeover Versione Vulnerabile : = 5.6.67 CV...
CVE-2025-2807
CVE-2025-2807: Plugin Motors Exploit di: Nxploited | Khaled Alenazi ⚠️ Riepilogo della vulnerabilità Plugin: Motors 📅 Si prevede che venga sfruttata su larga scala a causa della sua semplicità e dell'impatto critico. 🚫 Dettagli tecnici...
CVE-2026-66693
Subscriber Broken Access Control in Motors = 1.4.113 versions...
EUVD-2026-57903
Subscriber Broken Access Control in Motors = 1.4.113 versions...
CVE-2026-66693 WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability
Subscriber Broken Access Control in Motors = 1.4.113 versions...
CVE-2026-66693
Affected component: WordPress Motors plugin (versions
CVE-2026-66693
Subscriber Broken Access Control in Motors = 1.4.113 versions...
WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mohamed Bassia in WordPress Plugin Motors versions = 1.4.113...
CVE-2026-13114
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content and User Biographical Info in all versions up to, and including, 1.4.112 due to insufficient input sanitization and output escaping. This makes it possibl...
CVE-2026-13114
CVE-2026-13114 affects the Motors – Car Dealership & Classified Listings Plugin for WordPress, vulnerable to an unauthenticated Stored Cross-Site Scripting (XSS) via Comment Content and User Biographical Info in all versions up to 1.4.112. The flaw arises from insufficient input sanitization and ...
CVE-2026-13114 Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content and User Biographical Info in all versions up to, and including, 1.4.112 due to insufficient input sanitization and output escaping. This makes it possibl...
PT-2026-57376
Name of the Vulnerable Software and Affected Versions Motors – Car Dealership & Classified Listings Plugin versions prior to 1.4.113 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS. This occurs when arbitra...
CVE-2026-27433
Unauthenticated Broken Access Control in Motors = 5.6.80 versions...
EUVD-2026-41337
Unauthenticated Broken Access Control in Motors = 5.6.80 versions...
CVE-2026-27433 WordPress Motors theme <= 5.6.80 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Motors = 5.6.80 versions...