Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:07:03 +0000 CVE-2022-3989 — Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload https://vulnerability.circl.lu/vuln/cve-2022-3989 <p><strong>Affected:</strong> Unknown Motors</p> <p>The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .php) in an AJAX action, allowing an attacker to sign up on a victim&#39;s WordPress instance, upload a malicious PHP file and attempt to launch a brute-force attack to discover the uploaded payload.</p> <p><strong>Affected:</strong> Unknown Motors</p> <p>The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .php) in an AJAX action, allowing an attacker to sign up on a victim&#39;s WordPress instance, upload a malicious PHP file and attempt to launch a brute-force attack to discover the uploaded payload.</p> https://vulnerability.circl.lu/vuln/cve-2022-3989