mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-04 18:08:00 +02:00
1017 B
1017 B
CVE-2024-5545
Description
The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stm_edit_delete_user_car function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to unpublish arbitrary posts and pages.
POC
Reference
No PoCs from references.