plugin
3 known security issues reported for the Cardealer WordPress plugin. Most recent disclosed Dec 11, 2024.
Running Cardealer on your site? Check whether your installed version is affected.
Scan your site freeThe Car Dealer plugin for WordPress is vulnerable to unauthorized access to data due to a missing capability check on the cardealer_dbase_get_callback function in versions up to, and including, 4.46. This makes it possible for authenticated attackers, with subscriber-level access and above, to manage plugin settings.
The Car Dealer (Dealership) and Vehicle sales plugin for WordPress is vulnerable to unauthorized content injection due to insufficient input validation in all versions up to, and including, 4.15. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary content....
The Car Dealer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the cardealer_install_plugin() function in versions up to, and including, 3.04. This makes it possible for authenticated attackers with minimal permission, such as a subscriber, to install arbitrary plugins on...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free