Radar sectionsPlugins & themes
Check my site

WordPress plugin

Auto Listings – Car Listings & Car Dealership Plugin for WordPress security & vulnerabilities

auto-listings— active installsLast vulnerability Dec 30, 2025

No known unpatched vulnerabilities in the latest version

All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

2Known vulnerabilities
  • Critical0
  • High0
  • Medium2
  • Low0
Vulnerabilities per year
2024: 1 vulnerability1242025: 1 vulnerability125

All Auto Listings – Car Listings & Car Dealership Plugin for WordPress vulnerabilities

Auto Listings – Car Listings & Car Dealership Plugin for WordPress vulnerabilities
SeverityVulnerabilityCVEPublished
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.7.1Update to 2.7.2
CVE-2025-69089
Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
≤2.6.5Update to 2.6.6
CVE-2024-24713

Auto Listings – Car Listings & Car Dealership Plugin for WordPress: common questions

Does Auto Listings – Car Listings & Car Dealership Plugin for WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 2 known vulnerabilities in Auto Listings – Car Listings & Car Dealership Plugin for WordPress: 2 medium. None are known to affect version null.

How do I check which version of Auto Listings – Car Listings & Car Dealership Plugin for WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Auto Listings – Car Listings & Car Dealership Plugin for WordPress vulnerability?

CVE-2025-69089, published Dec 30, 2025: Auto Listings <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).

Is any Auto Listings – Car Listings & Car Dealership Plugin for WordPress vulnerability listed in CISA KEV?

No. None of the known Auto Listings – Car Listings & Car Dealership Plugin for WordPress vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?