VYPR

Olivecart

by Wp Olivecart

CVEs (2)

  • CVE-2016-4905CriMay 22, 2017
    risk 0.64cvss 9.8epss 0.02

    SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2016-4904HigMay 22, 2017
    risk 0.57cvss 8.8epss 0.00

    Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended operations via unspecified vectors.