PoC Index

CVE-2025-4322

CRITICAL 9.8EPSS 15.6%

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
15.65% chance of exploitation in the next 30 days, 97th percentile
Nuclei
critical · CWE-620
Published
2025-05-20
Updated
2026-04-08

Proof-of-concept exploits (3)

Nuclei templates (1)

References

Related