Skip to content
Thememakers vulnerabilities
Newest
-
thememakers car dealer
WordPress Car Dealer theme <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24391
7.1 High
-
thememakers visual content composer
WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability
CVE-2025-53299
9.8 Critical
-
thememakers car dealer
WordPress Car Dealer theme < 1.6.8 - PHP Object Injection vulnerability
CVE-2025-39480
9.8 Critical
-
thememakers car dealer automotive wordpress theme – responsive
Cardealer <= 1.6.4 - Cross-Site Request Forgery to User Update via update_user_profile
CVE-2025-1687
8.8 High
-
thememakers car dealer automotive wordpress theme – responsive
Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation
CVE-2025-1682
8.8 High
-
thememakers car dealer automotive wordpress theme – responsive
Cardealer <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files
CVE-2025-1681
5.4 Medium
-
thememakers car dealer automotive wordpress theme – responsive, car dealer automotive +1 more
Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read
CVE-2025-1282
8.8 High
-
thememakers stripe checkout
ThemeMakers Stripe Checkout <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-1690
6.4 Medium
-
thememakers paypal express checkout, paypal checkout +1 more
ThemeMakers PayPal Express Checkout <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-1689
6.4 Medium
-
sminozzi car dealer
WordPress Car Dealer plugin <= 4.46 - Broken Access Control vulnerability
CVE-2024-54298
4.3 Medium
-
bill minozzi car dealer
WordPress cardealer plugin <= 4.15 - Content Injection vulnerability
CVE-2024-4214
2.7 Low