Skip to content
OpenAdvisories
High · 8.2 CVE-2024-2702 EUVD-2024-27647GHSA-h3f7-4pq5-5jqm

WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability

Published Mar 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

Affected products

VendorProductAffectedFixed
Olive Themes Olive One Click Demo Import ≤ 1.1.1 —

References