CVE-2016-4904

CVE-2016-4904: falha em Olive Design WP-OliveCart

Publicada em · Atualizada em

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.9%
probabilidade de exploração
0.9%top 40% das CVEs
exploração observada
nãonenhuma fonte reporta
Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended operations via unspecified vectors.
Produtos afetados
Olive Design · WP-OliveCartOlive Design · WP-OliveCartPro
CVEs relacionadas — Olive Design WP-OliveCart

No mesmo produto, das mais perigosas para as menos.

CVE-2016-4905—CVE-2016-4905EPSS 1.9%CVE-2016-4903—CVE-2016-4903EPSS 1.2%CVE-2022-47435MEDIUMWordPress WP-OliveCart Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%
Referências
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000209.htmlhttps://jvn.jp/en/jp/JVN14567604/index.htmlhttp://www.securityfocus.com/bid/93790http://www.wp-olivecart.com/news/20160925.html