Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_quick_view AJAX handlers of the Motor WordPress theme before 3.1.0 allows an unauthenticated attacker a…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02633·Published 2021-07-06·Fixed in 3.1.0CWE-22