CVE-2025-4322 Scanner
CVE-2025-4322 Scanner - Privilege Escalation vulnerability in Motors
Used 3k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-4322
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
motors - car dealer, rental & listing wordpress theme
Updated Nov 7, 2026View on NVD →
S4E scanner
CVE history: motors - car dealer, rental & listing wordpress theme
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →