car_dealer_dealership_and_vehicle_sales vulnerabilities

CVEs whose affected-version data names the car_dealer_dealership_and_vehicle_sales package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-105971Medium· 5.3

2d ago

Car Dealer <= 4.73 - Unauthenticated Private/Draft/Pending Post Content Disclosure via cardealer_single_car_ajax

The Car Dealer (Dealership) and Vehicle sales WordPress plugin through 4.73 does not restrict its unauthenticated single-listing AJAX action to published content, allowing an unauthenticated attacker to read the title, content and metada…

▾ SunlitEPSS 0.21%via CVEORG