Rev Your Engines: Motors Theme Vulnerability Leaves 22,000 WordPress Sites in the Dust!
WordPress security firm Defiant alerts car dealers: your Motors theme might be driving you into a ditch! The CVE-2025-4322 vulnerability allows attackers to take over accounts like they’re test-driving a new car. Over 23,000 exploit attempts have been blocked. Update now, or your site might end up in a cyber crash!
Hot Take:
Looks like the Motors theme for WordPress is having a midlife crisis, with hackers taking it for a joyride through vulnerability lane! If your website is running this theme, it’s time to pit stop and patch up before it turns into a wreck.
Key Points:
- Mass exploitation of a critical vulnerability in the WordPress Motors theme.
- The vulnerability allows attackers to change any user account password, including administrators.
- It has a CVSS score of 9.8 and is tracked as CVE-2025-4322.
- Over 22,000 websites using the theme are at risk, with more than 23,000 exploit attempts blocked.
- The issue was patched on May 14, with public disclosure on May 19, but exploitation began shortly after.
Already a member? Log in here