ThemeMakers vulnerabilities
9 published CVEs name ThemeMakers among the affected products.
- 9Published CVEs9 of them scored
- 1Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-24391
WordPress Car Dealer theme <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
ThemeMakers · Car Dealer
High7.1 - CVE-2025-53299
WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability
ThemeMakers · ThemeMakers Visual Content Composer
Critical9.8 - CVE-2025-39480
WordPress Car Dealer theme < 1.6.8 - PHP Object Injection vulnerability
ThemeMakers · Car Dealer
Critical9.8 - CVE-2025-1687
Cardealer <= 1.6.4 - Cross-Site Request Forgery to User Update via update_user_profile
ThemeMakers · Car Dealer Automotive WordPress Theme – Responsive
High8.8 - CVE-2025-1682
Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation
ThemeMakers · Car Dealer Automotive WordPress Theme – Responsive
High8.8 - CVE-2025-1681
Cardealer <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files
ThemeMakers · Car Dealer Automotive WordPress Theme – Responsive
Medium5.4 - CVE-2025-1282
Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read
ThemeMakers · Car Dealer Automotive WordPress Theme – Responsive
High8.8 - CVE-2025-1690
ThemeMakers Stripe Checkout <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ThemeMakers · ThemeMakers Stripe Checkout
Medium6.4 - CVE-2025-1689
ThemeMakers PayPal Express Checkout <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ThemeMakers · ThemeMakers PayPal Express Checkout
Medium6.4