Advisories · Technology
Motors.
Every CVE that names Motors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.1 Low
Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured
- Motors
- Broken access control
- CVSS 6.8 Medium
Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color
- Motors
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure
- Motors
- Broken access control
- CVSS 5.3 Medium
Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media
- Motors
- Broken access control
- CVSS 8.8 High
Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload
- Motors