CVE-2025-64374CWE-434unrestricted-file-upload

CVE-2025-64374

Critical · published December 18, 2025

CVSS v3.1
9.9
EPSS
0%
Percentile
28.8
In the wild
Unconfirmed
What it is

🔥 An unrestricted file upload vulnerability could spell disaster for your Motors website! Think of it like allowing anyone to hand over a package without checking the contents — a recipe for a surprise delivery of chaos! An attacker could upload malicious files that might compromise your entire site, leading to data breaches, unauthorized access, or even complete takeover of the server. This could allow them to wreak havoc without anyone noticing until it's too late.

Put simply

Think of it like allowing anyone to hand over a package without checking the contents — a recipe for a surprise delivery of chaos! The vulnerability in StylemixThemes Motors allows for the uploading of any file type without proper validation, enabling attackers to upload dangerous scripts or executables.

What to do

An attacker could upload malicious files that might compromise your entire site, leading to data breaches, unauthorized access, or even complete takeover of the server. This could allow them to wreak havoc without anyone noticing until it's too late. Immediately upgrade to the latest version, 5.6.82 or above, to close this security hole. Additionally, implement strict file type validation and user authentication checks to tighten up security. Don't leave your site vulnerable! You've got this! With these steps, you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-12-18T13:16Z
References (1)
EPSS history
Timeline
  • 18 DEC 07:22Z
    WordPress Motors theme <= 5.6.81 - Arbitrary File Upload vulnerability
    cvelistv5