olivethemes vulnerabilities

Products

• olive one click demo import 4

Latest olivethemes CVEs

Newest publication first

1. CVE-2024-38749 WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability

   Published 2024-08-13

   High·CVSS 7.5 EPSS 0.39%

   Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo Import: from n/a through 1.1.2.

2. CVE-2024-32715 WordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerability

   Published 2024-06-09

   High·CVSS 7.5 EPSS 0.29%

   Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

3. CVE-2024-2702 WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability

   Published 2024-03-20

   Critical·CVSS 9.8 EPSS 0.58%

   Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

4. CVE-2023-29102 WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

   Published 2023-12-20

   High·CVSS 7.2 EPSS 0.80%

   Unrestricted Upload of File with Dangerous Type vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.