Car Dealer

PHP Object Injection Vulnerability <= 1.6.6

Arbitrary Theme Option Update to Authenticated (Subscriber+) Privilege Escalation vulnerability <= 1.6.4

CrossSite Request Forgery to User Update via update_user_profile vulnerability <= 1.6.4

Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files vulnerability <= 1.6.4

Authenticated (Subscriber+) Arbitrary File Deletion and Read vulnerability <= 1.6.3