- Description
- The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.
- Source
- security@wordfence.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- security@wordfence.com
- CWE-620
- Hype score
- Not currently trending
A critical flaw (CVE-2025-4322, CVSS 9.8) in WordPress's Motors theme allows unauthenticated password resets for full site takeover. Active exploitation has begun; update to 5.6.68 immediately! https://t.co/AU0CWy0vi5
@the_yellow_fall
24 Jun 2025
246 Impressions
0 Retweets
2 Likes
1 Bookmark
0 Replies
0 Quotes
#threatreport #LowCompleteness Attackers Actively Exploiting Critical Vulnerability in Motors Theme | 22-06-2025 Source: https://t.co/V7Ux4EQCYu Key details below ↓ 🎯Victims: Motors wordpress theme users 🔓CVEs: CVE-2025-4322 \[[Vulners](https://t.co/gifCgu4SJU)] - CVS
@rst_cloud
23 Jun 2025
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Hackers are exploiting a serious flaw in all WordPress Motors themes up to 5.6.67 to hijack admin accounts via password update errors. Over 23,000 attempts blocked since disclosure. Immediate updates needed! 🚨 #CVE-2025-4322 #UK #WordPressSecurity https://t.co/lePlWXOmMn
@TweetThreatNews
22 Jun 2025
145 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Urgent: A critical privilege escalation flaw (CVE-2025-4322) in WordPress Motors theme is being actively exploited, allowing attackers to hijack admin accounts. Update to v5.6.68+ immediately. Over 23K attacks blocked already. Details: https://t.co/3Frz4tnVEu
@RedTeamNewsBlog
22 Jun 2025
19 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-4322 - Wordpresse Theme Vulnerability: unauthenticated privilege escalation, clientside attack technique: parameter injection Why the attack works: -theme provides a publicly accessible user registration form
@ghostbugste
22 Jun 2025
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
2 Replies
0 Quotes
🚨 BREAKING: Hackers are mass-exploiting a critical flaw (CVE-2025-4322) in the WordPress Motors theme to hijack admin accounts! Over 22,000 sites at risk—patch NOW with 5.6.68. 🔒 #CyberSec #WordPress #Security https://t.co/WceJjnErUG
@xcybersecnews
21 Jun 2025
35 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
A critical vulnerability in the Motors theme (CVE-2025-4322) allows privilege escalation through account takeover via password recovery. Over 22,000 sites targeted, with 23,000+ attempts blocked. Update to version 5.6.68 now! 🚨 #WebSecurity #UK https://t.co/bjIMbx0uKb
@TweetThreatNews
20 Jun 2025
41 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
WordPressのMotorsテーマに重大(Critical)な脆弱性。CVE-2025-4322はCVSSスコア9.8。未認証の攻撃者が任意のユーザーのパスワードを変更することでアカウント乗っ取りが可能。バージョン5.6.68で修正。 https://t.co/vL80o89vKv
@__kokumoto
20 Jun 2025
1027 Impressions
2 Retweets
8 Likes
2 Bookmarks
0 Replies
0 Quotes
CVE-2025-4322 (CVSS:9.8, CRITICAL) is Awaiting Analysis. The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and inc..https://t.co/W3BC1kpa2v #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
@cracbot
25 May 2025
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Vulnerabilidad crítica en el tema Motors de WordPress (CVE-2025-4322) expone +22.000 sitios. 🔓 Atacantes pueden tomar control admin sin autenticación. 🛠️ Actualiza a la versión 5.6.68 ya. 🔗 Fuente: https://t.co/b8OG7Lrhvi #Ciberseguridad #WordPress #CVE2025 #
@ERCColombia
24 May 2025
18 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
⚠️「Motors」テーマに危険な脆弱性(CVE-2025-4322)が発見され、22,000超のWordPressサイトが危機に!早急な対応が必要です。CMSの安全性、今一度チェックを。#WordPress #CVE20254322 #情報セキュリティ https://t.co/YbvxfTuBK
@tksfukuyama
22 May 2025
37 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Critical WordPress 'Motors' Theme Bug Enables Admin Takeover CVE-2025-4322 lets attackers reset admin passwords on sites using Motors <5.6.68. 22K+ sites at risk—update now! https://t.co/X6gSdG9iJp #WordPress #Vulnerability #CVE20254322 #Infosec https://t.co/pRreLeB1
@dCypherIO
21 May 2025
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Flawed WordPress Theme May Allow Admin Account Takeover on 22,000+ Sites The Exploration of CVE-2025-4322: A WordPress Vulnerability With Large-Scale https://t.co/FVcK1X5D65
@AegisLens
21 May 2025
66 Impressions
1 Retweet
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Flawed #WordPress #theme may allow #admin account takeover on 22,000+ sites (CVE-2025-4322) https://t.co/86H0ZXsmle
@ScyScan
21 May 2025
29 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
A critical vulnerability in the Motors WordPress theme (CVE-2025-4322) allows attackers to hijack admin accounts without authentication. All versions up to 5.6.67 are affected. Update to 5.6.68 and back up now! 🚨 #WP #WebSecurity #UK https://t.co/BeU9EqqyRB
@TweetThreatNews
20 May 2025
85 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Critical alert: A privilege escalation flaw (CVE-2025-4322) in WordPress Motors theme lets attackers hijack admin accounts. Over 22,000 sites at risk—update to v5.6.68 immediately. Details: https://t.co/bG2pRcGkUG
@RedTeamNewsBlog
20 May 2025
29 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical vulnerability CVE-2025-4322 found in Motors WordPress theme, affecting 22,000 sites. Immediate update to version 5.6.68 recommended. #WordPress #CyberSecurity #WebsiteSecurity https://t.co/6qwjo7IhdA
@dailytechonx
20 May 2025
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
WordPressの人気テーマ「Motors」に、認証不要で管理者権限を奪取できる重大な脆弱性(CVE-2025-4322)が発見された。影響を受けるのはバージョン5.6.67以前で、攻撃者はユーザーのパスワードを本人確認なしでリセ
@yousukezan
20 May 2025
846 Impressions
1 Retweet
5 Likes
2 Bookmarks
0 Replies
0 Quotes
CVE-2025-4322 The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not pro… https://t.co/6Jnsqwn664
@CVEnew
20 May 2025
482 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes