- Description
- The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the default user role.
- Source
- security@wordfence.com
- NVD status
- Received
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- security@wordfence.com
- CWE-862
- Hype score
- Not currently trending
๐จ CVE-2025-1682 ๐ด HIGH (8.8) ๐ข ThemeMakers - Car Dealer Automotive WordPress Theme โ Responsive ๐๏ธ * ๐ https://t.co/mlsfTcUK4r ๐ https://t.co/WLbRjMR2eP ๐ https://t.co/edWeZowyQz #CyberCron #VulnAlert https://t.co/2FEtGMcGZU
@cybercronai
1 Mar 2025
19 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
๏ฟฝ๏ฟฝ CVE-2025-1682 - WordPress - HIGH ๐จ ๐๏ธ Date published 2025-02-28 00:15:36 UTC #WordPress #CyberSecurity #InfoSec #Vulnerability #TechNews https://t.co/rqdldeM72d
@vulns_space
28 Feb 2025
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-1682: HIGH] WordPress Cardealer theme (up to v1.6.4) has security flaw allowing authenticated attackers (subscriber level and above) to escalate privileges by altering default user roles. #cybersecurity#cybersecurity,#vulnerability https://t.co/Ogze2kU87r https://t.co/d
@CveFindCom
27 Feb 2025
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes