Read the docs

Wp-olivecart

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wp-olivecart records in CISA KEV

No Wp-olivecart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Olivecart 3 records MEDIUM Olivecartpro 3 records MEDIUM

Records

3 records

TI-2016-04248 CVE-2016-4905 · GHSA-2rx2-6g92-c889

SQL injection in Olive Design WP-OliveCart

Priority MEDIUM 46

SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01918 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-89
TI-2016-04247 CVE-2016-4904 · GHSA-gjhj-wpcq-5237

Cross-site request forgery in Olive Design WP-OliveCart

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended ope…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00923 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-352
TI-2016-04246 CVE-2016-4903 · GHSA-36hj-f8vr-vxrj

Cross-site scripting in Olive Design WP-OliveCart

Priority LOW 30

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-79
Open these records in search →