olivethemes records
4 published records for vendor olivethemes.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-862 Missing Authorization2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
39Monitor | CVE-2024-2702No exploit | WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerabilityolivethemes · olive one click demo import · CWE-862 | Critical9.8 | 0.5%Mar 20, 2024 |
30Monitor | CVE-2024-38749No exploit | WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerabilityolivethemes · olive one click demo import · CWE-200 | High7.5 | 0.3%Aug 13, 2024 |
30Monitor | CVE-2024-32715No exploit | WordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerabilityolivethemes · olive one click demo import · CWE-862 | High7.5 | 0.2%Jun 9, 2024 |
28Monitor | CVE-2023-29102No exploit | WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Uploadolivethemes · olive one click demo import · CWE-434 | High7.2 | 0.8%Dec 20, 2023 |
- CVE-2024-270239Monitor
WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability
CriticalCVSS 9.8No exploitEPSS 0%olivethemes · olive one click demo importMar 20, 2024
- CVE-2024-3874930Monitor
WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%olivethemes · olive one click demo importAug 13, 2024
- CVE-2024-3271530Monitor
WordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerability
HighCVSS 7.5No exploitEPSS 0%olivethemes · olive one click demo importJun 9, 2024
- CVE-2023-2910228Monitor
WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload
HighCVSS 7.2No exploitEPSS 0%olivethemes · olive one click demo importDec 20, 2023