CarDealerPress

Explore CarDealerPress vulnerabilities across all versions. Currently tracking 2 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all CarDealerPress vulnerabilities before they are exploited.

Vulnerability Records

2 records


2025-05-06 13:29	CarDealerPress <= 6.8.2505.00 - Authenticated (Contributor+) Stored Cross-Site Scripting via saleclass Parameter CarDealerPress <= 6.8.2505.00	`CVE-2025-3860`	6.4 Medium	Peter Thaleikis	Yes
2024-12-11 00:00	CarDealerPress <= 6.6.2410.02 - Reflected Cross-Site Scripting CarDealerPress <= 6.6.2410.02	`CVE-2024-54325`	6.1 Medium	Kévin Mosbahi (Mika)	Yes

Showing 1–2 of 2 reports

Latestv7.0.2606.01

CarDealerPress

Author

DealerTrend

4.2(5)

84/100

Last Updated

2026-06-24 (1mo ago)

Active Installs

30+

Downloads

23,960

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.0.2

Created

2015-05-28 (11y ago)

Thank you for using CarDealerPress for your automotive site(s). CarDealerPress is a display plugin for the DealerTrend Vehicle Marketing System (VMS). This is a very active plugin and is used by large franchise auto groups as well as small independent dealerships across the U.S. and Canada. If you are a marketing company and would like to build car dealer websites with the CarDealerPress plugin we have a comprehensive reseller program. Please contact us via the CarDealerPress website for more information. The CarDealerPress plugin is GNU licensed however it does require a DealerTrend VMS subscription to be functional. CarDealerPress Terms of Service/Use

View on WordPress.org