Read the docs

OLIVESYSTEM

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

OLIVESYSTEM records in CISA KEV

No OLIVESYSTEM vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-22204 CVE-2025-30934 · GHSA-7f42-qfj5-3w48

WordPress 診断ジェネレータ作成プラグイン plugin <= 1.4.16 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in OLIVESYSTEM 診断ジェネレータ作成プラグイン os-diagnosis-generator allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 診断ジェネレータ作成プラグイン: from n/a through <= 1.4.16.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00314 Published 2025-06-06 No fix listed CWE-862
TI-2026-04628 CVE-2026-5293 · GHSA-9hmw-83v5-qm22

診断ジェネレータ作成プラグイン <= 1.4.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'js' Parameter

Priority LOW 28

The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js' parameter in versions up to and including 1.4.16.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00308 Published 2026-05-20 No fix listed CWE-79
Open these records in search →