Carspot Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Carspot Project records in CISA KEV

No Carspot Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Carspot 1 record MEDIUM

Records

1 record

TI-2024-11918 CVE-2024-12860 · GHSA-r5mp-q6w8-mrh9

CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover

MEDIUM 49

The CarSpot – Dealership Wordpress Classified Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.4.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2025-02-18 No fix listed CWE-620

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0