Skip to content
OpenAdvisories

Vendor

ThemeMakers

9 known vulnerabilities.

Products

Car Dealer Automotive WordPress Theme – Responsive 4 Car Dealer 2 ThemeMakers PayPal Express Checkout 1 ThemeMakers Visual Content Composer 1 ThemeMakers Stripe Checkout 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-1681

    Cardealer <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files

    The Cardealer theme for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check and missing filename sanitization on the demo theme scheme AJAX functions in versions up to, and including, 1.6.4. This mak…

    ThemeMakers Car Dealer Automotive WordPress Theme – Responsive Web / CMS
  • Medium 6.4
    CVE-2025-1690

    ThemeMakers Stripe Checkout <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The ThemeMakers Stripe Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stripe' shortcode in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This m…

    ThemeMakers ThemeMakers Stripe Checkout Web / CMS
  • Medium 6.4
    CVE-2025-1689

    ThemeMakers PayPal Express Checkout <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The ThemeMakers PayPal Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypal' shortcode in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes…

    ThemeMakers ThemeMakers PayPal Express Checkout Web / CMS