https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T10:07:05.064157+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-3989 CVE-2022-3989 — Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload 2026-09-28T10:07:06.951092+00:00

Affected: Unknown Motors

The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .php) in an AJAX action, allowing an attacker to sign up on a victim's WordPress instance, upload a malicious PHP file and attempt to launch a brute-force attack to discover the uploaded payload.