Lucene search
K

12 matches found

CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

WordPress plugin Car Dealer 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.1CVSS5.7AI score0.00175EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.3 views

WordPress plugin WP CarDealer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. An elevation of privilege vulnerability exists in WordPress WP CarDealer, which stems from insufficient user role registration restrictions, and can be exploited by an...

9.8CVSS6.9AI score0.003EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/13 2:25 p.m.8 views

CVE-2024-54298 WordPress Car Dealer plugin <= 4.46 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bill Minozzi Car Dealer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Dealer: from n/a through 4.46...

4.3CVSS6.9AI score0.00421EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.2 views

WordPress plugin Car Dealer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.3AI score0.00421EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/12/11 7:31 p.m.2 views

WordPress Car Dealer plugin <= 4.46 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Aiden in WordPress Plugin Car Dealer versions = 4.46...

4.3CVSS7AI score0.00421EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.4 views

WordPress plugin Car Dealer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

2.7CVSS6.1AI score0.00373EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/04/25 7:31 p.m.8 views

WordPress cardealer plugin <= 4.15 - Content Injection vulnerability

Content Injection vulnerability discovered by Yash Chauhan Patchstack Alliance in WordPress Plugin Car Dealer versions = 4.15...

2.7CVSS7.2AI score0.00373EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/04/25 12:0 a.m.12 views

WordPress Car Dealer Plugin <= 4.15 is vulnerable to Content Injection

Software Car Dealer Type Plugin Vulnerable versions = 4.15 Fixed in 4.16 OWASP Top 10 A3: Injection Classification Content Injection CVE CVE-2024-4214 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID 9f6801c987d5 Credits Yash Chauhan Required privilege Administrator Publish...

2.7CVSS6.8AI score0.00373EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.2 views

WordPress plugin Motors - Car Dealer, Classifieds & Listing Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.1AI score0.00331EPSS
Exploits0References2
OSV
OSV
added 2023/05/25 11:15 a.m.1 views

CVE-2022-38716

Cross-Site Request Forgery CSRF vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin = 1.4.4 versions...

8.8CVSS5.8AI score0.00248EPSS
Exploits0References1
Prion
Prion
added 2023/05/25 11:15 a.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin = 1.4.4 versions...

6.8CVSS8.7AI score0.00248EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/12 5:54 p.m.11 views

CVE-2022-3879 Car Dealer < 3.05 - Subscriber+ Arbitrary Plugin Installation

The Car Dealer Dealership and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org...

7AI score0.00336EPSS
Exploits2References1
Rows per page
Query Builder