| Package | Affected versions | Patched versions |
|---|---|---|
| motors - car dealer, classifieds & listing | < 1.4.4 | 1.4.4 |
The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .php) in an AJAX action, allowing an attacker to sign up on a victim's WordPress instance, upload a malicious PHP file and attempt to launch a brute-force attack to discover the uploaded payload.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free