CVE-2024-10970

Summary

CVE-2024-10970 is a vulnerability affecting the The Motors – Car Dealer, Classifieds & Listing plugin for WordPress. In all versions up to 1.4.43, the software fails to properly validate user inputs before running do_shortcode, enabling authenticated attackers with Subscriber-level access or higher to execute arbitrary shortcodes. This issue can lead to unintended functionality, potential data leaks, or even complete site takeover. Users of the affected plugin are advised to update to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.