CVE-2025-1687 | ThemeMakers Car Dealer Automotive Theme up to 1.6.4 on WordPress update_user_profile cross-site request forgery

A vulnerability classified as problematic has been found in ThemeMakers Car Dealer Automotive Theme up to 1.6.4 on WordPress. Affected is the function update_user_profile. The manipulation leads to cross-site request forgery.

This vulnerability is traded as CVE-2025-1687. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.