{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1682", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-02-25T10:15:36.925Z", "datePublished": "2025-02-27T23:22:39.410Z", "dateUpdated": "2026-04-08T16:51:41.160Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:51:41.160Z"}, "affected": [{"vendor": "ThemeMakers", "product": "Car Dealer Automotive WordPress Theme \u2013 Responsive", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.6.4", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the default user role."}], "title": "Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e337281-f05e-486c-9491-161365af252a?source=cve"}, {"url": "https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708"}, {"url": "https://webtemplatemasters.com/cardealer/changelog/#v165"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Istv\u00e1n M\u00e1rton"}], "timeline": [{"time": "2025-02-25T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-02-25T00:00:00.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-02-27T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-28T14:47:39.603106Z", "id": "CVE-2025-1682", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-28T14:47:50.398Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1682", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-28T14:47:39.603106Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-28T14:47:44.700Z"}}], "cna": {"title": "Cardealer <= 1.6.4 - Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation", "credits": [{"lang": "en", "type": "finder", "value": "Istv\u00e1n M\u00e1rton"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "ThemeMakers", "product": "Car Dealer Automotive WordPress Theme \u2013 Responsive", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.6.4"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-02-25T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-02-25T00:00:00.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-02-27T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e337281-f05e-486c-9491-161365af252a?source=cve"}, {"url": "https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708"}, {"url": "https://webtemplatemasters.com/cardealer/changelog/#v165"}], "descriptions": [{"lang": "en", "value": "The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the default user role."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:51:41.160Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1682", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:51:41.160Z", "dateReserved": "2025-02-25T10:15:36.925Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-02-27T23:22:39.410Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the default user role."}, {"lang": "es", "value": "El tema Cardealer para WordPress es vulnerable a la escalada de privilegios en versiones hasta la 1.6.4 incluida debido a la falta de verificaci\u00f3n de capacidad en la funci\u00f3n 'save_settings'. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, modifiquen el rol de usuario predeterminado."}], "id": "CVE-2025-1682", "lastModified": "2026-04-15T00:35:42.020", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}]}, "published": "2025-02-28T00:15:36.100", "references": [{"source": "security@wordfence.com", "url": "https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708"}, {"source": "security@wordfence.com", "url": "https://webtemplatemasters.com/cardealer/changelog/#v165"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e337281-f05e-486c-9491-161365af252a?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T22:14:37.540081+00:00", "value": {"mitigation_remediation": ["Upgrade the Cardealer theme to version 1.6.5 or newer, which introduces the proper capability check on the save_settings function.", "If upgrading immediately is not feasible, configure a role editor plugin to remove the 'edit_theme_options' capability from subscriber and other non\u2011admin roles so they can no longer reach the theme settings page.", "Deploy a small custom plugin that intercepts updates to theme options and enforces the 'manage_options' capability check before allowing any changes, providing a temporary defense until the full update is available."], "summary": {"action": "Immediate Patch", "impact": "Authenticated (Subscriber+) Privilege Escalation"}, "threat_synthesis": {"affected_systems": "ThemeMakers Card Dealer Automotive WordPress Theme \u2013 Responsive, versions up to and including 1.6.4. WordPress sites using this theme are affected. The theme is available on ThemeForest under the 8574708 identifier.", "description_and_impact": "The Cardealer WordPress theme contains a missing capability check in its save_settings function, allowing any authenticated user with the Subscriber role or higher to modify the theme options. This flaw enables the attacker to change the default user role, effectively escalating privileges to higher roles such as Administrator and granting unrestricted access to the site.", "risk_and_exploitability": "With a CVSS score of 8.8 the vulnerability is considered High. The EPSS score is < 1%, indicating a low probability that it will be actively exploited at present. The vulnerability is not listed in the KEV catalog. An attacker requires a valid authenticated session with at least Subscriber access; from there the flaw can be leveraged by sending a request to the settings endpoint to change role assignments. The lack of a required high admin capability makes the exploit straightforward for any authenticated user."}}}}, "created": "2026-04-21T22:15:45.906121+00:00", "updated": "2026-04-21T22:15:45.906132+00:00", "vendors": []}