Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-06
Car Dealer (Dealership) and Vehicle sales - Security Vulnerability (CVE-2026-105971)
The Car Dealer (Dealership) and Vehicle sales WordPress plugin through 4.73 does not restrict its unauthenticated single-listing AJAX action to published content, allowing an unauthenticated attacker to read the title, content and metadata of any private, draft, pending, future or trashed post by supplying its numeric id.
PLUGIN
Car Dealer (Dealership) and Vehicle sales
CVE-2026-105971
Risk Score
Threat Entry
Updated 2026-06-17
Car Dealer (Dealership) and Vehicle sales - Cross-Site Request Forgery (CSRF) (CVE-2022-3879)
The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org
PLUGIN
Car Dealer (Dealership) and Vehicle sales
CVE-2022-3879
Risk Score