TThemeMakers

Products

Exploited and recent CVEs

• CVE-2026-24391 High 7.1 WordPress Car Dealer theme <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-53299 Critical 9.8 WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability 0.5%
• CVE-2025-39480 Critical 9.8 WordPress Car Dealer theme < 1.6.8 - PHP Object Injection vulnerability 0.6%
• CVE-2025-1687 High 8.8 Cardealer <= 1.6.4 - Cross-Site Request Forgery to User Update via update_user_profile 0.3%
• CVE-2025-1682 High 8.8 Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation 0.6%
• CVE-2025-1681 Medium 5.4 Cardealer <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files 0.4%
• CVE-2025-1282 High 8.8 Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read 1.1%
• CVE-2025-1690 Medium 6.4 ThemeMakers Stripe Checkout <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2025-1689 Medium 6.4 ThemeMakers PayPal Express Checkout <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%