Motors – Car Dealer, Classifieds & Listing vulnerabilities

Product

Motors – Car Dealer, Classifieds & Listing

by StylemixThemes · last CVE Apr 8, 2025

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 4Medium 8Low 0

Severity

All severities12 Critical0 High4 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Motors – Car Dealer, Classifieds & Listing to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-2807	8.8	1%	Apr 8	Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation Affected: before 1.4.65
CVE-2022-38716	8.8	0%	May 25	WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 1.4.4
CVE-2022-3989	8.8	1%	Dec 12	Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload Affected: before 1.4.4
CVE-2023-46207	7.5	1%	Nov 13	WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF) Affected: through 1.4.6
CVE-2019-17228	6.5	1%	Feb 24	includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options… Affected: through 1.4.0
CVE-2023-46208	6.1	0%	Oct 27	WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS) Affected: through 1.4.6
CVE-2019-17229	6.1	1%	Feb 24	includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress has multiple stored XSS issues Affected: through 1.4.0
CVE-2025-2808	5.4	0%	Apr 8	Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting Affected: before 1.4.64
CVE-2024-10970	5.4	0%	Jan 16	Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title Affected: before 1.4.44
CVE-2024-5545	5.3	0%	Jul 2	Motors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorization Affected: before 1.4.11
CVE-2025-3437	4.3	0%	Apr 8	Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up Affected: before 1.4.67
CVE-2024-13737	4.3	0%	Mar 22	Motors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation Affected: before 1.4.58