6.5 Medium

CVE-2022-3879 The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper…

Description

The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org

Affected products and versions

Product	Affected versions	Fixed in
Car Dealer (Dealership) and Vehicle sales WordPress Plugin 3.05	earliest → < 3.05	3.05

Do you use Car Dealer (Dealership) and Vehicle sales WordPress Plugin?

Track this CVE Watch Car Dealer (Dealership) and Vehicle sales WordPress Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-3879

Timeline

Published December 12, 2022
Last modified April 22, 2025

References

wpscan.com wpscan.com

Track this CVE