Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Olive Design Clear all filters
TI-2016-04248 CVE-2016-4905 · GHSA-2rx2-6g92-c889

SQL injection in Olive Design WP-OliveCart

Priority MEDIUM 46

SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01918 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-89
TI-2016-04247 CVE-2016-4904 · GHSA-gjhj-wpcq-5237

Cross-site request forgery in Olive Design WP-OliveCart

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended ope…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00923 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-352
TI-2016-04246 CVE-2016-4903 · GHSA-36hj-f8vr-vxrj

Cross-site scripting in Olive Design WP-OliveCart

Priority LOW 30

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-05-22 Fixed in 3.1.3, 3.1.8 CWE-79
TI-2016-06590 CVE-2016-7841 · GHSA-4c5h-rg94-5qr4

Cross-site scripting in Olive Diary DX

Priority LOW 29

Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-04-28 No fix listed CWE-79
TI-2016-06589 CVE-2016-7840 · GHSA-5fv4-wh9g-vjvh

Cross-site scripting in Olive Design WEB SCHEDULE

Priority LOW 29

Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0085 Published 2017-04-28 No fix listed CWE-79
TI-2016-06588 CVE-2016-7839 · GHSA-hx6r-3wg6-64wf

Cross-site scripting in Olive Blog

Priority LOW 29

Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-04-28 No fix listed CWE-79