Thème WordPress
Vulnérabilités CarSpot – Dealership Wordpress Classified Theme
Cette page rassemble les failles publiées pour CarSpot – Dealership Wordpress Classified Theme, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CarSpot – Dealership Wordpress Classified Theme
5 fiches
CarSpot < 2.4.6 – Reflected Cross-Site Scripting
The CarSpot theme for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages…
[*, 2.4.6)
2.4.6
20/01/2026
CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 – Unauthenticated Arbitrary Password Reset/Account Takeover
The CarSpot – Dealership Wordpress Classified Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.4.3. This is due to the plugin not properly validating a token prior…
*-2.4.3
2.4.4
17/02/2025
CarSpot – Dealership Wordpress Classified Theme <= 2.2.3 – Insecure Direct Object Reference
The CarSpot – Dealership Wordpress Classified Theme for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.2.3 via the 'ad_id' parameter passed via the sb_remove_ad AJAX action. This makes it possible for…
*-2.2.3
2.2.4
27/01/2020
CarSpot – Dealership Wordpress Classified Theme <= 2.2.3 – Stored Cross-Site Scripting
The CarSpot – Dealership Wordpress Classified Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘admin-ajax.php’ file in versions up to, and including, 2.2.3 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.2.3
2.2.4
27/01/2020
CarSpot – Dealership Wordpress Classified Theme < 2.1.7 – Authenticated Stored Cross-Site Scripting
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.
[*, 2.1.7)
2.1.7
18/04/2019
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.