← Back

Car Dealer Project

car_dealer_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Car Dealer
car_dealer
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-3879
1Car Dealer Project
1Car Dealer
Apr 22, 2025
Dec 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it a...Show more
The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.orgShow less