Arbitrary Shortcode Execution Vulnerability in Motors WordPress Theme

CVE-2024-13738

What is CVE-2024-13738?

The Motors - Car Dealer, Rental & Listing WordPress theme is susceptible to an arbitrary shortcode execution vulnerability that affects all versions up to and including 5.6.65. This flaw allows unauthenticated attackers to execute arbitrary shortcodes due to improper validation of values before executing the do_shortcode function. This poses a significant risk to users of the theme, as it can lead to unauthorized actions being performed on the site. Users are strongly encouraged to update to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References