CVE-2024-38749

7.5 highEPSS 0.4%

High (7.5) in olivethemes olive one click demo import. EPSS 0.4% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo Import: from n/a through 1.1.2.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-11-01)
CWE: CWE-200
Published: 2024-08-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

olivethemes:olive_one_click_demo_import

References

https://patchstack.com/database/vulnerability/olive-one-click-demo-import/wordpress-olive-one-click-demo-import-plugin-1-1-2-sensitive-data-exposure-vulnerability?_s_id=cve

Check your stack JSON