CVE-2024-13737

Summary

CVE-2024-13737 is a vulnerability affecting the Motors – Car Dealer, Classifieds & Listing plugin for WordPress. Unauthorized data modification can occur due to missing capability checks on the motors_create_template and motors_delete_template functions, which are present in all versions up to 1.4.57. This issue grants authenticated attackers, with Subscriber-level access and above, the ability to delete arbitrary posts or create listing templates. The Elementor plugin, a required plugin for Motors Starter Theme, must be installed for this vulnerability to be exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.