Privilege Escalation Vulnerability in Motors Theme for WordPress

CVE-2025-4322

What is CVE-2025-4322?

The Motors theme for WordPress has a vulnerability that allows privilege escalation through an account takeover exploit. This issue arises from inadequate validation of user identity when updating passwords. As a result, unauthenticated attackers can reset passwords for any user, including administrators, thereby gaining unauthorized access to their accounts. Implementing proper authentication checks is critical to mitigating this risk and securing user data.

News Articles

BleepingComputer

CVE-2025-4322

Premium WordPress 'Motors' theme vulnerable to admin takeover attacks

A critical privilege escalation vulnerability has been discovered in the premium WordPress theme Motors, which allows unauthenticated attackers to hijack administrator accounts and take complete control of websites.

1 day ago

References