WordPress theme
Car Dealer Automotive WordPress Theme – Responsive security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High4
- Medium2
- Low0
All Car Dealer Automotive WordPress Theme – Responsive vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.6.7Update to 1.6.8 | CVE-2026-24391 | |
| Critical9.8 | Unauthenticated PHP Object Injection <1.6.7Update to 1.6.7 | CVE-2025-39480 | |
| Medium5.4 | Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files ≤1.6.4Update to 1.6.5 | CVE-2025-1681 | |
| High8.8 | Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation ≤1.6.4Update to 1.6.5 | CVE-2025-1682 | |
| High8.8 | Cross-Site Request Forgery to User Update via update_user_profile ≤1.6.4Update to 1.6.5 | CVE-2025-1687 | |
| High8.8 | Authenticated (Subscriber+) Arbitrary File Deletion and Read ≤1.6.3Update to 1.6.4 | CVE-2025-1282 | |
| High7.5 | Sensitive Information Disclosure <1.1.9Update to 1.1.9 | CVE-2015-9482 |
- Medium6.1Reflected Cross-Site Scripting
≤1.6.7Update to 1.6.8
- Critical9.8Unauthenticated PHP Object Injection
<1.6.7Update to 1.6.7
- Medium5.4Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files
≤1.6.4Update to 1.6.5
- High8.8Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation
≤1.6.4Update to 1.6.5
- High8.8Cross-Site Request Forgery to User Update via update_user_profile
≤1.6.4Update to 1.6.5
- High8.8Authenticated (Subscriber+) Arbitrary File Deletion and Read
≤1.6.3Update to 1.6.4
- High7.5Sensitive Information Disclosure
<1.1.9Update to 1.1.9
Car Dealer Automotive WordPress Theme – Responsive: common questions
Does Car Dealer Automotive WordPress Theme – Responsive have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Car Dealer Automotive WordPress Theme – Responsive: 1 critical, 4 high, 2 medium. None are known to affect version null.
How do I check which version of Car Dealer Automotive WordPress Theme – Responsive I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Car Dealer Automotive WordPress Theme – Responsive vulnerability?
CVE-2026-24391, published Mar 23, 2026: Car Dealer Automotive WordPress Theme – Responsive <= 1.6.7 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Car Dealer Automotive WordPress Theme – Responsive vulnerability listed in CISA KEV?
No. None of the known Car Dealer Automotive WordPress Theme – Responsive vulnerabilities is currently listed in the CISA KEV catalog.