- ‘Motors’ WordPress Theme takes the via -objection account which is open to takeover attacks
- Wide attacks from 7 June
- A patch version is available in 5.6.68, so update now
A popular Premium WordPress theme, thanks to an important privilege escapetation defect by hackers, which has been tracked as CVE-2025–4322.
The attackers are capable of taking advantage of vulnerability in the abduction administrator accounts in the ‘Motors’ themes, complete control of sites to change details, to inject false details and spread malicious payloads.
A popular pick, about 22,500 sales of the subject, developed by stylemixthemes and a popular pick, is logged on envatomarket.
‘Motors’ WordPress theme is kidnapped
The vulnerability was first discovered on May 2, 2025, later on 14 May with a patch released with an edition 5.6.68, which means that up-to-date accounts should be protected from potential account acquisition. Editions up to 5.6.67 are affected by Cve, with WordFence Reporting on details on May 19.
“This is due to the topic that the user’s identity is not properly valid before updating their passwords,” Wordfense explained.
“This makes it possible for informal attackers to change arbitrary user passwords, including administrators, and take advantage of this to get access to their account.”
Although the patch has already been released, the old version -running accounts are the threat of takeover, with the attacks starting on 20 May. Until 7 June, researchers were observing wide-scale attacks-Wordfenns have now blocked more than 23,000 attack efforts.
Wordfense also revealed several major IP addresses, which were seen to attack the sites – many attempts.
“A clear indication of the infection is that if the administrator of a site is unable to log in with the right password because it has been replaced as a result of this vulnerability,” the researchers explained.
The biggest change of ‘Motors’ theme is to update the user 5.6.68 version, closing vulnerability for the attackers and securing their accounts from takeover.
Through BlappingCopper
