Extension WordPress
Vulnérabilités Motors – Car Dealership & Classified Listings Plugin, page 2
Cette page rassemble les failles publiées pour Motors – Car Dealership & Classified Listings Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Motors – Car Dealership & Classified Listings Plugin
26 fiches
Motors – Car Dealer & Classified Ads <= 1.4.6 – Server Side Request Forgery
The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This makes it possible for unauthenticated attackers to make web requests to arbitrary…
*-1.4.6
1.4.7
19/10/2023
Motors – Car Dealer & Classified Ads <= 1.4.6 – Reflected Cross-Site Scripting
The Motors – Car Dealer & Classified Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 1.4.6 due to insufficient input sanitization and output escaping. This makes…
*-1.4.6
1.4.7
19/10/2023
Motors – Car Dealer & Classified Ads <= 1.4.5 – Cross-Site Request Forgery via Multiple Functions
The Motors – Car Dealer & Classified Ads plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.5. This is due to missing or incorrect nonce validation on multiple functions. This makes…
*-1.4.5
1.4.6
19/04/2023
Motors – Car Dealer, Classifieds & Listing <= 1.4.3 – Unauthenticated Arbitrary File Upload
The Motors – Car Dealer, Classifieds & Listin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the stm_ajax_add_a_car_media function for a nopriv AJAX action in versions up to, and including,…
*-1.4.3
1.4.4
21/11/2022
Motors Car Dealer & Classified Ads <= 1.4.0 – Unauthenticated Settings Import/Export
includes/options.php in the motors-car-dealership-classified-listings (aka Motors – Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated plugin settings changes, including the ability to add malicious JavaScript to a site.
[*, 1.4.1)
1.4.1
20/09/2019
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 – Stored Cross-Site Scripting
includes/options.php in the motors-car-dealership-classified-listings (aka Motors – Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress has multiple stored XSS issues.
[*, 1.4.1)
1.4.1
20/09/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.