Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Wp-olivecart Component: Olivecartpro Clear all filters
TI-2016-04248 CVE-2016-4905 · GHSA-2rx2-6g92-c889

SQL injection in Olive Design WP-OliveCart

Priority MEDIUM 46

SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01918 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-89
TI-2016-04247 CVE-2016-4904 · GHSA-gjhj-wpcq-5237

Cross-site request forgery in Olive Design WP-OliveCart

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended ope…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00923 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-352
TI-2016-04246 CVE-2016-4903 · GHSA-36hj-f8vr-vxrj

Cross-site scripting in Olive Design WP-OliveCart

Priority LOW 30

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-79