What’s Vulnerable › Products
ThemeMakers Car Dealer Automotive WordPress Theme – Responsive vulnerabilities
4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Latest ThemeMakers Car Dealer Automotive WordPress Theme – Responsive vulnerabilities
- CVE-2025-1687 — Cardealer <= 1.6.4 - Cross-Site Request Forgery to User Update via update_user_profile (CVSS 8.8)
- CVE-2025-1682 — Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)
- CVE-2025-1681 — Cardealer <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files (CVSS 5.4)
- CVE-2025-1282 — Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read (CVSS 8.8)