Ovic Team vulnerabilities

Products

• Ovic Addon Toolkit 1
• Ovic Importer 1
• Ovic Product Bundle 1
• Ovic Responsive WPBakery 1

Latest Ovic Team CVEs

Newest publication first

1. CVE-2023-41649 WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability

   Published 2024-12-13

   Medium·CVSS 6.5 EPSS 0.64%

   Missing Authorization vulnerability in Ovic Team Ovic Product Bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovic Product Bundle: from n/a through 1.1.2.

2. CVE-2024-35754 WordPress Ovic Importer plugin <= 1.6.3 - Arbitrary File Download vulnerability

   Published 2024-06-10

   Medium·CVSS 6.5 EPSS 0.53%

   Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ovic Team Ovic Importer allows Path Traversal.This issue affects Ovic Importer: from n/a through 1.6.3.

3. CVE-2024-32432 WordPress Ovic Addon Toolkit plugin <= 2.6.1 - Broken Access Control vulnerability

   Published 2024-04-24

   Medium·CVSS 4.3 EPSS 0.46%

   Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1.

4. CVE-2024-32142 WordPress Ovic Responsive WPBakery plugin <= 1.3.0 - Broken Access Control vulnerability

   Published 2024-04-18

   Medium·CVSS 5.4 EPSS 0.39%

   Missing Authorization vulnerability in Ovic Team Ovic Responsive WPBakery.This issue affects Ovic Responsive WPBakery: from n/a through 1.3.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.