CarSpot – Dealership Wordpress Classified Theme vulnerabilities
1 known vulnerability in CarSpot – Dealership Wordpress Classified Theme from Scriptsbundle. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
CarSpot – Dealership Wordpress Classified Theme: Unverified Password Change
The CarSpot – Dealership Wordpress Classified Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.4.3. This is due to the plugin not properly validating a token prior to updating a user's