Olive Themes

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Olive Themes records in CISA KEV

No Olive Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Olive One Click Demo Import 4 records HIGH

Records

4 records

TI-2024-02515 CVE-2024-2702 · GHSA-h3f7-4pq5-5jqm

WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability

HIGH 81

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00584 Published 2024-03-20 No fix listed CWE-862

TI-2023-13544 CVE-2023-29102 · GHSA-5ppm-xc39-892p

WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00805 Published 2023-12-20 No fix listed CWE-434

TI-2024-25983 CVE-2024-38749 · GHSA-576m-857x-xpjm

WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00389 Published 2024-08-13 No fix listed CWE-200

TI-2024-21595 CVE-2024-32715 · GHSA-rxh8-v6x2-m5h4

WordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerability

LOW 35

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00294 Published 2024-06-09 No fix listed CWE-862

Open these records in search →

Critical	2
High	2
Medium	0
Low	0
No CVSS	0