Authentication vulnerability in Motors – Car Dealer, Rental & Listing WordPress theme 5.6.67

The Motors theme for WordPress has a security issue that allows attackers to take over accounts and gain access to sensitive information. This vulnerability affects all versions up to and including 5.6.67. The problem is that the theme does not check the user’s identity before allowing them to update their password. As a result, anyone without proper authentication can change user passwords, even for administrators, and use that access to log into their account.