PT-2026-1904 · Unknown · Themesuite Automotive Listings

Published 2026-01-08 · Updated 2026-01-08 · CVE-2025-67928

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions themesuite Automotive Listings versions n/a through 18.6

Description An issue exists in themesuite Automotive Listings that allows for Blind SQL Injection due to Improper Neutralization of Special Elements used in an SQL Command. This allows an attacker to potentially manipulate database queries. The vulnerable component is susceptible to exploitation through SQL injection techniques.

Recommendations Update themesuite Automotive Listings to a version greater than 18.6.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-67928

Affected Products

Themesuite Automotive Listings

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-67928 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/automotive/vulnerability/wordpress-automotive-listings-plugin-18-6-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2009201101107606001 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/automotive/vulnerability/wordpress-automotive-listings-plugin-18-6-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2009283069061079112 · Twitter Post