Read the docs

Olive Design

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Olive Design records in CISA KEV

No Olive Design vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Olive Blog 2 records LOW Olive Diary Dx 1 record LOW

Records

7 records

TI-2016-04248 CVE-2016-4905 · GHSA-2rx2-6g92-c889

SQL injection in Olive Design WP-OliveCart

Priority MEDIUM 46

SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01918 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-89
TI-2016-04247 CVE-2016-4904 · GHSA-gjhj-wpcq-5237

Cross-site request forgery in Olive Design WP-OliveCart

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended ope…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00923 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-352
TI-2016-04246 CVE-2016-4903 · GHSA-36hj-f8vr-vxrj

Cross-site scripting in Olive Design WP-OliveCart

Priority LOW 30

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-79
TI-2016-06590 CVE-2016-7841 · GHSA-4c5h-rg94-5qr4

Cross-site scripting in Olive Diary DX

Priority LOW 29

Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-04-28 No fix listed CWE-79
TI-2016-06589 CVE-2016-7840 · GHSA-5fv4-wh9g-vjvh

Cross-site scripting in Olive Design WEB SCHEDULE

Priority LOW 29

Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0085 Published 2017-04-28 No fix listed CWE-79
TI-2016-06588 CVE-2016-7839 · GHSA-hx6r-3wg6-64wf

Cross-site scripting in Olive Blog

Priority LOW 29

Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-04-28 No fix listed CWE-79
Open these records in search →