Dealertrend

2 CVEs in 1 Dealertrend product, including Cardealerpress. Newest: CVE-2025-3860 (2025-05-07). Severity, EPSS and public exploits for each.

Dealertrend products with known CVEs

ProductCVEs
Cardealerpress2
Dealertrend CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-3860Medium6.42025-05-07The CarDealerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘saleclass' parameter in all versions up to, and including, 6.8.25…
CVE-2024-54325High7.12024-12-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DealerTrend CarDealerPress cardealerpress allows Reflecte…