Vulnerability history

Unauthenticated Stored Cross-Site Scripting vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification vulnerability

Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media vulnerability

Broken Access Control vulnerability

Local File Inclusion vulnerability

SQL Injection vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Missing Authorization to Authenticated (Subscriber+) Payment Bypass vulnerability

Broken Access Control vulnerability

WordPress Motors - Car Dealer, Classifieds & Listing plugin <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Insecure Direct Object References (IDOR) Vulnerability

Local File Inclusion vulnerability

Missing Authorization to Authenticated (Subscriber+) Wizard Set-up vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Local File Inclusion vulnerability

Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title vulnerability

Missing Authorization vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Server Side Request Forgery (SSRF) vulnerability

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple security issues