CarSpot
Scriptsbundle · 1 CVE
CVE-2025-69317
HIGH
WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability
Jan 22, 2026
CVE-2019-15870
MEDIUM
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.
Sep 3, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-69317 | WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.21% | Jan 22, 2026 |
| CVE-2019-15870 | The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field. | MEDIUM | 0.74% | Sep 3, 2019 |
Showing 1 to 1 of 1 CVEs