Medium severity6.5NVD Advisory· Published Feb 24, 2020· Updated Jun 17, 2026

CVE-2019-17228

Description

includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Stellarwp/Motors – Car Dealer, Classifieds & Listing
cpe:2.3:a:stylemixthemes:motors_-_car_dealer\,_classifieds_\&_listing:*:*:*:*:*:wordpress:*:*
Range: <=1.4.0
WordPress/motors-car-dealership-classified-listingsdescription
WordPress/Motors Car Dealership Classified Listingsllm-fuzzy
Range: <=1.4.0
Package: https://wordpress.org/plugins/motors-car-dealership-classified-listings

Patches

Vulnerability mechanics

References

blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-motors-car-dealer-classified-ads-plugin/nvdExploitThird Party Advisory
wordpress.org/plugins/motors-car-dealership-classified-listings/nvdRelease NotesThird Party Advisory
wpvulndb.com/vulnerabilities/9884nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000