DealerTrend
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CarDealerPress | 2 | – | May 7, 2025 |
Exploited and recent CVEs
- CVE-2025-3860 CarDealerPress <= 6.8.2505.00 - Authenticated (Contributor+) Stored Cross-Site Scripting via saleclass Parameter 0.3%
- CVE-2024-54325 WordPress CarDealerPress plugin <= 6.6.2410.02 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%