Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Car Dealer Automotive WordPress Theme – Responsive — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Car Dealer Automotive WordPress Theme – Responsive, with AI-generated Chinese analysis, references, and POCs.

Vendor: ThemeMakers

CVE IDTitleCVSSSeverityPublished
CVE-2025-1687 Cardealer <= 1.6.4 - Cross-Site Request Forgery to User Update via update_user_profile CWE-352 8.8 High2025-02-27
CVE-2025-1681 Cardealer <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files CWE-862 5.4 Medium2025-02-27
CVE-2025-1682 Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation CWE-862 8.8 High2025-02-27
CVE-2025-1282 Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read CWE-22 8.8 High2025-02-27

All 4 known CVE vulnerabilities affecting Car Dealer Automotive WordPress Theme – Responsive with full Chinese analysis, references, and POCs where available.