Car Dealer Automotive WordPress Theme – Responsive

Car Dealer Automotive WordPress Theme – Responsive has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 7 are fixed as of September 2026. Their average CVSS score is 7.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 4 high. 2025 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (29%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 7 issues recorded for Car Dealer Automotive WordPress Theme – Responsive has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (3) reported by István Márton.

Strategic Overview

Avg CVSSHigh

7.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Car Dealer Automotive WordPress Theme – Responsive vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-39480

Car Dealer < 1.6.7 - Unauthenticated PHP Object Injection

Read the full analysis

Vulnerability Records

7 records


2026-03-23 00:00	Car Dealer Automotive WordPress Theme – Responsive <= 1.6.7 - Reflected Cross-Site Scripting Car Dealer Automotive WordPress Theme <= 1.6.7	`CVE-2026-24391`	6.1 Medium	João Pedro Soares de Alcântara	Yes
2025-05-22 00:00	Car Dealer < 1.6.7 - Unauthenticated PHP Object Injection Car Dealer Automotive WordPress Theme < 1.6.7	`CVE-2025-39480`	9.8 Critical	Bonds	Yes
2025-02-27 00:00	Cardealer <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files Car Dealer Automotive WordPress Theme <= 1.6.4	`CVE-2025-1681`	5.4 Medium	István Márton	Yes
2025-02-27 00:00	Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation Car Dealer Automotive WordPress Theme <= 1.6.4	`CVE-2025-1682`	8.8 High	István Márton	Yes
2025-02-27 00:00	Cardealer <= 1.6.4 - Cross-Site Request Forgery to User Update via update_user_profile Car Dealer Automotive WordPress Theme <= 1.6.4	`CVE-2025-1687`	8.8 High	István Márton	Yes
2025-02-26 00:00	Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read Car Dealer Automotive WordPress Theme <= 1.6.3	`CVE-2025-1282`	8.8 High	Tonn	Yes
2015-05-15 00:00	Car Dealer Automotive WordPress Theme < 1.1.9 - Sensitive Information Disclosure Car Dealer Automotive WordPress Theme < 1.1.9	`CVE-2015-9482`	7.5 High	Hugo Santiago dos Santos	Yes

Showing 1–7 of 7 reports