WordPress theme
CarSpot – Dealership Wordpress Classified Theme security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium3
- Low0
All CarSpot – Dealership Wordpress Classified Theme vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting <2.4.6Update to 2.4.6 | CVE-2025-69317 | |
| Critical9.8 | Unauthenticated Arbitrary Password Reset/Account Takeover ≤2.4.3Update to 2.4.4 | CVE-2024-12860 | |
| Medium6.4 | Stored Cross-Site Scripting ≤2.2.3Update to 2.2.4 | — | |
| High7.5 | Insecure Direct Object Reference ≤2.2.3Update to 2.2.4 | — | |
| Medium6.4 | Authenticated Stored Cross-Site Scripting <2.1.7Update to 2.1.7 | CVE-2019-15870 |
- Medium6.1Reflected Cross-Site Scripting
<2.4.6Update to 2.4.6
- Critical9.8Unauthenticated Arbitrary Password Reset/Account Takeover
≤2.4.3Update to 2.4.4
- Medium6.4Stored Cross-Site Scripting
≤2.2.3Update to 2.2.4
- High7.5Insecure Direct Object Reference
≤2.2.3Update to 2.2.4
- Medium6.4Authenticated Stored Cross-Site Scripting
<2.1.7Update to 2.1.7
CarSpot – Dealership Wordpress Classified Theme: common questions
Does CarSpot – Dealership Wordpress Classified Theme have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in CarSpot – Dealership Wordpress Classified Theme: 1 critical, 1 high, 3 medium. None are known to affect version null.
How do I check which version of CarSpot – Dealership Wordpress Classified Theme I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CarSpot – Dealership Wordpress Classified Theme vulnerability?
CVE-2025-69317, published Jan 20, 2026: CarSpot < 2.4.6 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any CarSpot – Dealership Wordpress Classified Theme vulnerability listed in CISA KEV?
No. None of the known CarSpot – Dealership Wordpress Classified Theme vulnerabilities is currently listed in the CISA KEV catalog.