Lucene search
+L

27 matches found

Kitploit
Kitploit
•added 2026/09/29 12:02 a.m.•15 views

Blackash-CVE-2025-4322

CVE-2025-4322 : Unauthenticated Privilege Escalation via Password Update "Account Takeover 🔥" Description : The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a...

9.8CVSS8.7AI score0.15524EPSS
SaveExploits3
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•134 views

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...

9.8CVSS8.4AI score0.15524EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•9 views

PT-2026-71590

Subscriber Broken Access Control in Motors = 1.4.113 versions...

6.5CVSS5.2AI score0.00299EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/02 11:14 a.m.•51 views

CVE-2026-27433 WordPress Motors theme <= 5.6.80 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Motors = 5.6.80 versions...

6.5CVSS0.00332EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/02 11:14 a.m.•38 views

CVE-2026-27433

The CVE concerns the WordPress Motors theme (

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/06/30 1:02 p.m.•17 views

WordPress Motors theme <= 5.6.80 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad in WordPress Theme Motors versions = 5.6.80...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/06/17 3:17 p.m.•28 views

CVE-2026-54812

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Motors allows Blind SQL Injection. This issue affects Motors: from n/a through 1.4.109...

9.3CVSS0.004EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/17 1:41 p.m.•24 views

EUVD-2026-37709

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors allows PHP Local File Inclusion. This issue affects Motors: from n/a through 1.4.109...

8.1CVSS5.3AI score0.00557EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•48 views

CVE-2025-64374 WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through = 5.6.81...

9.9CVSS0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 7:22 a.m.•9 views

CVE-2025-64374 WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through = 5.6.81...

9.9CVSS6.6AI score0.00362EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/21 5:50 p.m.•16 views

WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Motors versions = 5.6.81...

9.9CVSS7AI score0.00362EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
•added 2025/06/23 9:08 p.m.•427 views

Exploit for CVE-2025-4322

CVE-2025-4322 : Unauthenticated Privilege Escalation via Passw...

9.8CVSS10AI score0.15524EPSS
SaveExploits3
Wordfence Blog
Wordfence Blog
•added 2025/06/19 4:56 p.m.•19 views

Attackers Actively Exploiting Critical Vulnerability in Motors Theme

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters! 📢 🌞 Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our ‘High Threat’ list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

9.8CVSS7.7AI score0.15524EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2025/05/22 3:12 p.m.•581 views

Exploit for CVE-2025-4322

PoC exploit for CVE-2025-4322, an unauthenticated privilege esca...

9.8CVSS9.9AI score0.15524EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2025/05/22 6:16 a.m.•17 views

CVE-2025-4322

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...

9.8CVSS7.4AI score0.15524EPSS
SaveExploits3References1
NVD
NVD
•added 2025/05/20 6:15 a.m.•35 views

CVE-2025-4322

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...

9.8CVSS0.15524EPSS
SaveExploits3References2
CVE
CVE
•added 2025/05/20 5:30 a.m.•167 views

CVE-2025-4322

CVE-2025-4322 affects the Motors WordPress theme up to version 5.6.67, where a flawed password update flow allows unauthenticated attackers to change arbitrary user passwords (including administrators), enabling account takeover. Root cause: insufficient validation of requester identity before pr...

9.8CVSS9.8AI score0.15524EPSS
SaveIn wildExploits3References2
Cvelist
Cvelist
•added 2025/05/20 5:30 a.m.•54 views

CVE-2025-4322 Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...

9.8CVSS0.15524EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2025/05/20 12:00 a.m.•15 views

PT-2025-22122 · WordPress · Motors

Name of the Vulnerable Software and Affected Versions: Motors WordPress theme versions prior to 5.6.68 Description: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover. This is due to the theme not properly validating a user's identity prior to updating their...

9.8CVSS9.9AI score0.15524EPSS
SaveExploits3References38
Patchstack
Patchstack
•added 2025/05/19 7:44 p.m.•15 views

WordPress Motors theme <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover vulnerability

Unauthenticated Privilege Escalation via Password Update/Account Takeover vulnerability discovered by Foxyyy in WordPress Theme Motors versions = 5.6.67...

9.8CVSS7AI score0.15524EPSS
SaveExploits3References1Affected Software1
Rows per page
Query Builder