37 matches found
CVE-2024-34433
Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0...
CVE-2024-2702
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1...
EUVD-2023-32705
Malicious code in bioql PyPI...
EUVD-2024-27647
Malicious code in bioql PyPI...
EUVD-2024-37597
Malicious code in bioql PyPI...
EUVD-2022-33789
Malicious code in bioql PyPI...
EUVD-2024-34794
Malicious code in bioql PyPI...
CVE-2022-1008
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files such as PHP even when FILEMODS and FILEEDIT are disallowed...
CVE-2024-38749
CVE-2024-38749 affects the Olive One Click Demo Import plugin for WordPress (versions n/a through 1.1.2). The issue is Information Disclosure caused by Access Control Lists (ACLs) not properly constraining access to certain functionality, allowing an unauthorized actor to access sensitive data. P...
WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Olive One Click Demo Import versions = 1.1.2...
WordPress Olive One Click Demo Import Plugin <= 1.1.2 is vulnerable to Sensitive Data Exposure
Software Olive One Click Demo Import Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-38749 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3944618737f2 Credits Peng Zhou Require...
CVE-2024-32715
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1...
CVE-2024-32715
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1...
CVE-2024-34433
Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0...
CVE-2024-34433
Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0...
PT-2024-25887 · Unknown · One Click Demo Import
Name of the Vulnerable Software and Affected Versions: One Click Demo Import versions 3.2.0 and earlier Description: The issue is related to the Deserialization of Untrusted Data, which affects the functionality of the software. Recommendations: For versions 3.2.0 and earlier, update to a version...
WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by ngductung Patchstack Alliance in WordPress Plugin One Click Demo Import versions = 3.2.0...
WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Download
Software Olive One Click Demo Import Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Download CVE CVE-2024-32715 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID a4c06fc8a3c4 Credits Yudistira Arya...
Olive One Click Demo Import < 1.1.2 - Missing Authorization
Description The Olive One Click Demo Import plugin for WordPress is vulnerable to unauthorized modification of data due to a insufficient capability checking on several rest routes in versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to perform unauthorize...
CVE-2024-2702
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1...