Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-3989

The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .php) in an AJAX action, allowing an attacker to sign up on a victim's WordPress instance, upload a malicious PHP file and attempt to launch a brute-force attack to discover the uploaded payload.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.3%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2022-3989
  • None » None » Version:
    _classifieds_&_listing:-
  • None » None » Version:
    _classifieds_&_listing:1.0
  • None » None » Version:
    _classifieds_&_listing:1.1
  • None » None » Version:
    _classifieds_&_listing:1.2
  • None » None » Version:
    _classifieds_&_listing:1.3
  • None » None » Version:
    _classifieds_&_listing:1.3.1
  • None » None » Version:
    _classifieds_&_listing:1.3.3
  • None » None » Version:
    _classifieds_&_listing:1.3.4
  • None » None » Version:
    _classifieds_&_listing:1.3.5
  • None » None » Version:
    _classifieds_&_listing:1.3.6
  • None » None » Version:
    _classifieds_&_listing:1.3.7
  • None » None » Version:
    _classifieds_&_listing:1.3.8
  • None » None » Version:
    _classifieds_&_listing:1.3.9
  • None » None » Version:
    _classifieds_&_listing:1.4.0
  • None » None » Version:
    _classifieds_&_listing:1.4.3
  • Stylemixthemes » Motors - Car Dealer » Version: Any
    cpe:2.3:a:stylemixthemes:motors_-_car_dealer


Products
Pricing
Contact Us

Shodan ® - All rights reserved