Access violation vulnerability in Car Dealer (Dealership) and Vehicle sales 4.46

The Car Dealer plugin for WordPress has a security flaw that allows unauthorized users to access data. This happens because the plugin does not check for the necessary permissions before allowing access to the cardealer_dbase_get_callback function. This vulnerability exists in versions 4.46 and below, which means that anyone with subscriber-level access or higher can manage the plugin’s settings without proper authorization.