WordPress Automotive Car Dealership Business Theme <=13.4.1 Authenticated Stored XSS via project_details (CVE-2025-14042)

www.wordfence.com 2026-06-02翻訳準備中…中国語で表示中中国語 →English →

Security AdvisoryCVE-2025-14042MediumWordPress

Affected:

Automotive Car Dealership Business WordPress Theme <= 13.4.1

Fixed in:

13.4.2

参照 CVE: CVE-2025-14042 · 6.4

文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档

本文由本平台从 www.wordfence.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。

このソースからの他の記事

WordPress OTP Login Plugin Unauthenticated Auth Bypass via Firebase (CVE-2026-3655) 2026-06-02 WordPress Simply Schedule Appointments Missing Authorization Arbitrary Modification (CVE-2026-6937) 2026-06-02 WP Travel Pro <= 10.6.0 Unauthenticated Arbitrary User Deletion via REST API (CVE-2026-4290) 2026-06-02 PDF Embedder WordPress Plugin Information Disclosure via Block Editor 2026-06-02 Easy Digital Downloads <= 3.6.7 CSRF to Payment Account Hijacking via square_tokens (CVE-2026-7533) 2026-06-02

离线存档

离线截图 & PDF 为 Pro 专属