CVE-2025-64374

—

CVSS 3.1

9.9 critical

EPSS

<1%p29

Published

Dec 18, 2025 (Dec 18, 2025)

Modified

Jun 17, 2026

Description

Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through <= 5.6.81.

Ecosystems: WordPress
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news2 stories

⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & More

The Hacker NewsDec 27, 07:49 UTC · Dec 27, 2025Vulnerability CVE-2025-20393 CVE-2025-40602 CVE-2025-23006+22 CVEs

Motors WordPress Vulnerability Exposes Sites to Takeover

Infosecurity MagazineDec 17, 16:45 UTC · Dec 17, 2025Vulnerability CVE-2025-64374