Car Dealer Automotive WordPress Theme – Responsive vulnerabilities
3 known vulnerabilities in Car Dealer Automotive WordPress Theme – Responsive from ThemeMakers. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Car Dealer Automotive WordPress Theme –…: Cross-Site Request Forgery
The Cardealer theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing nonce validation on the 'update_user_profile' function. This makes it possible for unauthenticated attackers to update
- 8.8 High severity
Car Dealer Automotive WordPress Theme –…: Missing Authorization
The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access an
- 8.8 High severity
Car Dealer Automotive WordPress Theme –…: Improper Limitation of a Pathname to a Restricted Directory
The Car Dealer Automotive WordPress Theme – Responsive theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_post_photo() and add_car() functions in all versions up to, and including, 1.6.3. This ma