What’s Vulnerable › Vulnerabilities

CVE-2019-17228

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-02-24 · updated 2026-06-17
• Weakness: CWE-345

Description

includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.

Affected products

• stylemix Motors – Car Dealership & Classified Listings Plugin: through 1.4.0

References

• https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-motors-car-dealer-classified-ads-plugin/
• https://wordpress.org/plugins/motors-car-dealership-classified-listings/#developers
• https://wpvulndb.com/vulnerabilities/9884
• https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-motors-car-dealer-classified-ads-plugin/
• https://wordpress.org/plugins/motors-car-dealership-classified-listings/#developers
• https://wpvulndb.com/vulnerabilities/9884

Get alerted when CVE-2019-17228 or the next vulnerability affects your stack