2 lines
2.6 KiB
JSON
2 lines
2.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Car Dealer Automotive WordPress Theme – Responsive","vendor":"ThemeMakers","versions":[{"lessThanOrEqual":"1.6.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Cardealer theme for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check and missing filename sanitization on the demo theme scheme AJAX functions in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to change or delete arbitrary css and js files."},{"lang":"es","value":"El tema Cardealer para WordPress es vulnerable a la modificación no autorizada de datos y a la pérdida de datos debido a la falta de una verificación de capacidad y de una depuración de nombres de archivo en las funciones AJAX del esquema del tema de demostración en versiones hasta la 1.6.4 incluida. Esto permite que atacantes autenticados, con acceso de nivel de suscriptor o superior, cambien o eliminen archivos CSS y JS arbitrarios."}],"id":"CVE-2025-1681","lastModified":"2026-06-17T08:39:35.683","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1681","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-02-28T14:59:42.739618Z","version":"2.0.3"}}]},"published":"2025-02-28T00:15:35.950","references":[{"source":"security@wordfence.com","url":"https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708"},{"source":"security@wordfence.com","url":"https://webtemplatemasters.com/cardealer/changelog/#v165"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e394ee2-13c1-4b04-a8a5-4642f1794d59?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"security@wordfence.com","type":"Secondary"}]}
|