Year Make Model Search for WooCommerce
Year Make Model Search for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Year Make Model Search for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nguyen Xuan Chien. Year Make Model Search for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-48265Year Make Model Search for WooCommerce <= 1.0.11 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Year Make Model Search for WooCommerce
Author
Pektsekye
It has fixed number and the sort order of the drop-down selects: — Make — — Model — — Year — Product restrictions are used for searching and for drop-downs options in the search box. So if you set a restriction like: Acura, CL, 1997, 1998 for a product. The “Acura CL 1997” will be already selectable in the search box on the front-end. Main Features: Search for products on the home page Filter products on category pages List applicable vehicles on the front-end product view page CSV import / export for product restrictions You can read the installation instructions here: README Simple Code Idea: The idea of this plugin is to keep the base version as simple as possible. And to add the new features as modifications. This plugin has just 28 files to make it easy to use and customize. Contact me by email pektsekye@gmail.com if you have questions or need help. Translators Available Languages English (Default) Documentation Full documentation is available here.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C