CVE-2025-1682 | ThemeMakers Car Dealer Automotive Theme up to 1.6.4 on WordPress Setting save_settings authorization

A vulnerability classified as critical was found in ThemeMakers Car Dealer Automotive Theme up to 1.6.4 on WordPress. Affected by this vulnerability is the function save_settings of the component Setting Handler. The manipulation leads to missing authorization.

This vulnerability is known as CVE-2025-1682. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.